Grassi, Lorenzo, Christian Rechberger, and Markus Schofnegger. 2021. “Proving Resistance Against Infinitely Long Subspace Trails: How to Choose the Linear Layer”. IACR Transactions on Symmetric Cryptology 2021 (2):314-52. https://doi.org/10.46586/tosc.v2021.i2.314-352.