“Solving Degree Bounds for Iterated Polynomial Systems”. 2024. IACR Transactions on Symmetric Cryptology 2024 (1): 357-411. https://doi.org/10.46586/tosc.v2024.i1.357-411.