2021. Towards Key-recovery-attack Friendly Distinguishers: Application to GIFT-128. IACR Transactions on Symmetric Cryptology. 2021, 1 (Mar. 2021), 156–184. DOI:https://doi.org/10.46586/tosc.v2021.i1.156-184.