On impossible differential attacks
Revisiting Impossible Differential Cryptanalysis and Expanding the Application of MILP in Impossible Differential Attack
Impossible Differential Attack on SAND-128