2024. Reconstructing S-Boxes from Cryptographic Tables with Milp. IACR Transactions on Symmetric Cryptology. 2024, 3 (Sep. 2024), 200–237. DOI:https://doi.org/10.46586/tosc.v2024.i3.200-237.