Quantum Differential and Linear Cryptanalysis. ToSC 2016, 2016 (1), 71-94. https://doi.org/10.13154/tosc.v2016.i1.71-94.