“Direct Construction of Optimal Rotational-XOR Diffusion Primitives” (2017) IACR Transactions on Symmetric Cryptology, 2017(4), pp. 169–187. doi:10.13154/tosc.v2017.i4.169-187.