“Lightweight Iterative MDS Matrices: How Small Can We Go?” (2020) IACR Transactions on Symmetric Cryptology, 2019(4), pp. 147–170. doi:10.13154/tosc.v2019.i4.147-170.