Cryptanalyzing Mega in Six Queries [pdf]
eprint.iacr.org