Grassi, L.; Rechberger, C.; Rønjom, S. Subspace Trail Cryptanalysis and Its Applications to AES. ToSC 2017, 2016, 192-225.