“Towards Key-recovery-attack Friendly Distinguishers: Application to GIFT-128”, ToSC, vol. 2021, no. 1, pp. 156–184, Mar. 2021, doi: 10.46586/tosc.v2021.i1.156-184.