M. Kaplan, G. Leurent, A. Leverrier, and M. Naya-Plasencia, “Quantum Differential and Linear Cryptanalysis”, ToSC, vol. 2016, no. 1, pp. 71–94, Dec. 2016, doi: 10.13154/tosc.v2016.i1.71-94.