“Lightweight Diffusion Layer: Importance of Toeplitz Matrices” (2016) IACR Transactions on Symmetric Cryptology, 2016(1), pp. 95–113. doi:10.13154/tosc.v2016.i1.95-113.