The retracing boomerang attack, with application to reduced-round AES
scientific article; zbMATH DE number 7904201