Grassi L, Rechberger C, Schofnegger M. Proving Resistance Against Infinitely Long Subspace Trails: How to Choose the Linear Layer. ToSC [Internet]. 2021 Jun. 11 [cited 2024 Apr. 23];2021(2):314-52. Available from: https://tosc.iacr.org/index.php/ToSC/article/view/8913