[1]
L. Grassi, C. Rechberger, and M. Schofnegger, “Proving Resistance Against Infinitely Long Subspace Trails: How to Choose the Linear Layer”,
ToSC
, vol. 2021, no. 2, pp. 314–352, Jun. 2021,
doi: 10.46586/tosc.v2021.i2.314-352.