“Direct Construction of Optimal Rotational-XOR Diffusion Primitives”. 2017. IACR Transactions on Symmetric Cryptology 2017 (4): 169-87. https://doi.org/10.13154/tosc.v2017.i4.169-187.