“Shorter Linear Straight-Line Programs for MDS Matrices”. 2017. IACR Transactions on Symmetric Cryptology 2017 (4): 188-211. https://doi.org/10.13154/tosc.v2017.i4.188-211.