Erlacher, J., F. Mendel, and M. Eichlseder. “Bounds for the Security of Ascon Against Differential and Linear Cryptanalysis”. IACR Transactions on Symmetric Cryptology, vol. 2022, no. 1, Mar. 2022, pp. 64-87, doi:10.46586/tosc.v2022.i1.64-87.