“Analyzing the Linear Keystream Biases in AEGIS”. IACR Transactions on Symmetric Cryptology 2019, no. 4 (January 31, 2020): 348–368. Accessed December 27, 2024. https://tches.iacr.org/index.php/ToSC/article/view/8468.