Grøstl Distinguishing Attack: A New Rebound Attack of an AES-Like Permutation. ToSC 2017, 2017 (3), 1-23. https://doi.org/10.13154/tosc.v2017.i3.1-23.