“Know-Thy-Basis: Decomposing F26 for Lightweight S-box Implementation” (2024) IACR Transactions on Cryptographic Hardware and Embedded Systems, 2024(4), pp. 763–794. doi:10.46586/tches.v2024.i4.763-794.