“Multiple Linear Cryptanalysis Using Linear Statistics” (2020) IACR Transactions on Symmetric Cryptology, 2019(4), pp. 369–406. doi:10.13154/tosc.v2019.i4.369-406.