Exploiting output bits and the χ operation in MitM preimage attacks on Keccak. - Tianling Weng; Gaoli Wang; Keting Jia; Xiaoyang Dong 001; Siwei Sun; Tingting Cui (Des. Codes Cryptogr., 2025)