Full round distinguishing and key-recovery attacks on SAND-2
scientific article; zbMATH DE number 7883565