Rechberger, Christian, et al. “Cryptanalysis of Low-Data Instances of Full LowMCv2”. IACR Transactions on Symmetric Cryptology, vol. 2018, no. 3, Sept. 2018, pp. 163-81, doi:10.13154/tosc.v2018.i3.163-181.