Grassi L, Khovratovich D, Rønjom S, Schofnegger M. The Legendre Symbol and the Modulo-2 Operator in Symmetric Schemes over Fnp: Preimage Attack on Full Grendel. ToSC [Internet]. 2022 Mar. 11 [cited 2024 Apr. 26];2022(1):5-37. Available from: https://tosc.iacr.org/index.php/ToSC/article/view/9525