Proving Resistance Against Infinitely Long Subspace Trails: How to Choose the Linear Layer. IACR Transactions on Symmetric Cryptology, [S. l.], v. 2021, n. 2, p. 314–352, 2021. DOI: 10.46586/tosc.v2021.i2.314-352. Disponível em: https://tosc.iacr.org/index.php/ToSC/article/view/8913.. Acesso em: 17 jul. 2024.