Lorenzo Grassi, Irati Manterola Ayala, Martha Norberg Hovd, Morten Øygarden, Håvard Raddum and Qingju Wang. “Cryptanalysis of Symmetric Primitives over Rings and a Key Recovery Attack on Rubato.” Crypto 2023. Annual International Cryptology Conference. Springer, Cham.