Duval, S., & Leurent, G. (2018). MDS Matrices with Lightweight Circuits. IACR Transactions on Symmetric Cryptology, 2018(2), 48-78. https://doi.org/10.13154/tosc.v2018.i2.48-78