“General Diffusion Analysis: How to Find Optimal Permutations for Generalized Type-II Feistel Schemes” (2019) IACR Transactions on Symmetric Cryptology, 2019(1), pp. 264–301. doi:10.13154/tosc.v2019.i1.264-301.