Banik, Subhadeep, et al. “Cryptanalysis of LowMC Instances Using Single Plaintext Ciphertext Pair”. IACR Transactions on Symmetric Cryptology, vol. 2020, no. 4, Dec. 2020, pp. 130-46, doi:10.46586/tosc.v2020.i4.130-146.