Preimage attacks on 4-round Keccak by solving multivariate quadratic systems
scientific article; zbMATH DE number 7628050