Towards Key-recovery-attack Friendly Distinguishers: Application to GIFT-128. ToSC. 2021;2021(1):156-184. doi:10.46586/tosc.v2021.i1.156-184