Saha, D., S. Kuila, and D. R. Chowdhury. “SymSum: Symmetric-Sum Distinguishers Against Round Reduced SHA3”. IACR Transactions on Symmetric Cryptology, vol. 2017, no. 1, Mar. 2017, pp. 240-58, doi:10.13154/tosc.v2017.i1.240-258.