“MDS Matrices with Lightweight Circuits” (2018) IACR Transactions on Symmetric Cryptology, 2018(2), pp. 48–78. doi:10.13154/tosc.v2018.i2.48-78.