“Invariant Subspace Attack Against Midori64 and The Resistance Criteria for S-box Designs” (2016) IACR Transactions on Symmetric Cryptology, 2016(1), pp. 33–56. doi:10.13154/tosc.v2016.i1.33-56.