Significantly Improved Multi-bit Differentials for Reduced Round Salsa and ChaCha. ToSC. 2017;2016(2):261-287. doi:10.13154/tosc.v2016.i2.261-287