Proving Resistance Against Infinitely Long Subspace Trails: How to Choose the Linear Layer. ToSC [Internet]. 2021 Jun. 11 [cited 2024 Jul. 17];2021(2):314-52. Available from: https://tosc.iacr.org/index.php/ToSC/article/view/8913