“Integral Cryptanalysis Using Algebraic Transition Matrices” (2023) IACR Transactions on Symmetric Cryptology, 2023(4), pp. 244–269. doi:10.46586/tosc.v2023.i4.244-269.