“Differentially 4-Uniform Permutations with the Best Known Nonlinearity from Butterflies” (2017) IACR Transactions on Symmetric Cryptology, 2017(2), pp. 228–249. doi:10.13154/tosc.v2017.i2.228-249.