A Bit-Vector Differential Model for the Modular Addition by a Constant and its Applications to Differential and Impossible-Differential Cryptanalysis.
Seyyed Arash AzimiAdrián RaneaMahmoud SalmasizadehJavad MohajeriMohammad Reza ArefVincent RijmenPublished in: IACR Cryptol. ePrint Arch. (2022)