“On the Generalization of Butterfly Structure” (2018) IACR Transactions on Symmetric Cryptology, 2018(1), pp. 160–179. doi:10.13154/tosc.v2018.i1.160-179.