"A zero-sum property for the KECCAK-f permutation with 18 rounds."

Christina Boura, Anne Canteaut (2010)
a service of Schloss Dagstuhl - Leibniz Center for Informatics