“Optimizing Implementations of Linear Layers” (2020) IACR Transactions on Symmetric Cryptology, 2020(2), pp. 120–145. doi:10.13154/tosc.v2020.i2.120-145.