“Efficient MILP Modelings for Sboxes and Linear Layers of SPN ciphers” (2020) IACR Transactions on Symmetric Cryptology, 2020(3), pp. 327–361. doi:10.13154/tosc.v2020.i3.327-361.