SymSum: Symmetric-Sum Distinguishers Against Round Reduced SHA3. ToSC 2017, 2017 (1), 240-258. https://doi.org/10.13154/tosc.v2017.i1.240-258.