differential cryptanalysis of primitives which use a mixture of addition, rotation and xor (cf. NIST SHA-3 Competition)