Lamberger, Mendel, Schläffer, Rechberger, Rijmen, 2013. The Rebound Attack and Subspace Distinguishers: Application to Whirlpool 28.. https://doi.org/10.1007/s00145-013-9166-5