Towards Key-recovery-attack Friendly Distinguishers: Application to GIFT-128. (2021). IACR Transactions on Symmetric Cryptology, 2021(1), 156-184. https://doi.org/10.46586/tosc.v2021.i1.156-184