“MILP Modeling for (Large) S-Boxes to Optimize Probability of Differential Characteristics”. IACR Transactions on Symmetric Cryptology, vol. 2017, no. 4, Dec. 2017, pp. 99-129, https://doi.org/10.13154/tosc.v2017.i4.99-129.