Bounds for the Security of Ascon against Differential and Linear Cryptanalysis. - Johannes Erlacher; Florian Mendel; Maria Eichlseder (IACR Trans. Symmetric Cryptol., 2022)