Proving resistance against invariant attacks: how to choose the round constants
scientific article; zbMATH DE number 6807194