L. Grassi, C. Rechberger, and S. Rønjom, “Subspace Trail Cryptanalysis and its Applications to AES”, ToSC, vol. 2016, no. 2, pp. 192–225, Feb. 2017.