Choudhuri, Arka Rai, and Subhamoy Maitra. “Significantly Improved Multi-Bit Differentials for Reduced Round Salsa and ChaCha”. IACR Transactions on Symmetric Cryptology, vol. 2016, no. 2, Feb. 2017, pp. 261-87, doi:10.13154/tosc.v2016.i2.261-287.