SymSum: Symmetric-Sum Distinguishers Against Round Reduced SHA3. (2017).
IACR Transactions on Symmetric Cryptology
,
2017
(1), 240-258.
https://doi.org/10.13154/tosc.v2017.i1.240-258