Cauchois, Victor, et al. “Grøstl Distinguishing Attack: A New Rebound Attack of an AES-Like Permutation”. IACR Transactions on Symmetric Cryptology, vol. 2017, no. 3, Sept. 2017, pp. 1-23, doi:10.13154/tosc.v2017.i3.1-23.