“MILP Modeling for (Large) S-Boxes to Optimize Probability of Differential Characteristics”. 2017. IACR Transactions on Symmetric Cryptology 2017 (4): 99-129. https://doi.org/10.13154/tosc.v2017.i4.99-129.