Florian Mendel Christian Rechberger Martin Schläffer Søren S. Thomsen The Rebound Attack: Cryptanalysis of Reduced Whirlpool and Grøstl. 260-276 2009 FSE http://dx.doi.org/10.1007/978-3-642-03317-9_16 conf/fse/2009 db/conf/fse/fse2009.html#MendelRST09