Dunkelman, Orr, and Senyang Huang. “Reconstructing an S-Box from Its Difference Distribution Table”. IACR Transactions on Symmetric Cryptology 2019, no. 2 (June 11, 2019): 193–217. Accessed March 28, 2024. https://tosc.iacr.org/index.php/ToSC/article/view/8319.