Grassi, L., C. Rechberger, and M. Schofnegger. “Proving Resistance Against Infinitely Long Subspace Trails: How to Choose the Linear Layer”. IACR Transactions on Symmetric Cryptology, Vol. 2021, no. 2, June 2021, pp. 314-52, doi:10.46586/tosc.v2021.i2.314-352.