“Grøstl Distinguishing Attack: A New Rebound Attack of an AES-Like Permutation”. 2017.
IACR Transactions on Symmetric Cryptology
2017 (3): 1-23.
https://doi.org/10.13154/tosc.v2017.i3.1-23
.