GRASSI, L.; RECHBERGER, C.; SCHOFNEGGER, M. Proving Resistance Against Infinitely Long Subspace Trails: How to Choose the Linear Layer. IACR Transactions on Symmetric Cryptology, v. 2021, n. 2, p. 314-352, 11 Jun. 2021.