Grassi, Lorenzo, Dmitry Khovratovich, Sondre Rønjom, and Markus Schofnegger. “The Legendre Symbol and the Modulo-2 Operator in Symmetric Schemes over Fnp: Preimage Attack on Full Grendel”. IACR Transactions on Symmetric Cryptology 2022, no. 1 (March 11, 2022): 5–37. Accessed January 18, 2025. https://er.ceres.rub.de/index.php/ToSC/article/view/9525.