Kranz, T. et al. 2017. Shorter Linear Straight-Line Programs for MDS Matrices. IACR Transactions on Symmetric Cryptology. 2017, 4 (Dec. 2017), 188–211. DOI:https://doi.org/10.13154/tosc.v2017.i4.188-211.