Grassi, L., Rechberger, C., & Rønjom, S. (2017). Subspace Trail Cryptanalysis and its Applications to AES. IACR Transactions on Symmetric Cryptology, 2016(2), 192–225. https://doi.org/10.13154/tosc.v2016.i2.192-225