“Searching for Subspace Trails and Truncated Differentials” (2018) IACR Transactions on Symmetric Cryptology, 2018(1), pp. 74–100. doi:10.13154/tosc.v2018.i1.74-100.