Hall-Andersen, Mathias, and Philip S. Vejre. “Generating Graphs Packed With Paths Estimation of Linear Approximations and Differentials”. IACR Transactions on Symmetric Cryptology, vol. 2018, no. 3, Sept. 2018, pp. 265-89, doi:10.13154/tosc.v2018.i3.265-289.