“Towards Key-recovery-attack Friendly Distinguishers: Application to GIFT-128” (2021)
IACR Transactions on Symmetric Cryptology
, 2021(1), pp. 156–184.
doi:10.46586/tosc.v2021.i1.156-184
.