Bonnetain, X., and S. Jaques. “Quantum Period Finding Against Symmetric Primitives in Practice”. IACR Transactions on Cryptographic Hardware and Embedded Systems, vol. 2022, no. 1, Nov. 2021, pp. 1-27, doi:10.46586/tches.v2022.i1.1-27.