Cauchois, Victor, Clément Gomez, and Reynald Lercier. “Grøstl Distinguishing Attack: A New Rebound Attack of an AES-Like Permutation”. IACR Transactions on Symmetric Cryptology 2017, no. 3 (September 19, 2017): 1–23. Accessed March 29, 2024. https://tosc.iacr.org/index.php/ToSC/article/view/763.