2017. Accurate Estimate of the Advantage of Impossible Differential Attacks. IACR Transactions on Symmetric Cryptology. 2017, 3 (Sep. 2017), 169–191. DOI:https://doi.org/10.13154/tosc.v2017.i3.169-191.