"Improved zero-sum distinguisher for full round Keccak-f permutation."

Ming Duan, Xuejia Lai (2011)
a service of Schloss Dagstuhl - Leibniz Center for Informatics