“Solving Degree Bounds for Iterated Polynomial Systems” (2024) IACR Transactions on Symmetric Cryptology, 2024(1), pp. 357–411. doi:10.46586/tosc.v2024.i1.357-411.