Leander, Gregor, et al. “Searching for Subspace Trails and Truncated Differentials”. IACR Transactions on Symmetric Cryptology, vol. 2018, no. 1, Mar. 2018, pp. 74-100, doi:10.13154/tosc.v2018.i1.74-100.