Grassi, Lorenzo, Christian Rechberger, and Markus Schofnegger. “Proving Resistance Against Infinitely Long Subspace Trails: How to Choose the Linear Layer”. IACR Transactions on Symmetric Cryptology 2021, no. 2 (June 11, 2021): 314–352. Accessed January 18, 2025. https://icscm.ub.rub.de/index.php/ToSC/article/view/8913.