Abdelkhalek, Ahmed, et al. “MILP Modeling for (Large) S-Boxes to Optimize Probability of Differential Characteristics”. IACR Transactions on Symmetric Cryptology, vol. 2017, no. 4, Dec. 2017, pp. 99-129, doi:10.13154/tosc.v2017.i4.99-129.