“On the Lower Bound of Cost of MDS Matrices”. IACR Transactions on Symmetric Cryptology, vol. 2022, no. 4, Dec. 2022, pp. 266-90, https://doi.org/10.46586/tosc.v2022.i4.266-290.