Integer linear programming for three-subset meet-in-the-middle attacks: application to GIFT
scientific article; zbMATH DE number 6964080