The Legendre Symbol and the Modulo-2 Operator in Symmetric Schemes over Fnp: Preimage Attack on Full Grendel. ToSC [Internet]. 2022 Mar. 11 [cited 2024 Dec. 27];2022(1):5-37. Available from: https://tches.iacr.org/index.php/ToSC/article/view/9525