“Influence of the Linear Layer on the Algebraic Degree in SP-Networks”. IACR Transactions on Symmetric Cryptology 2022, no. 1 (March 11, 2022): 110–137. Accessed December 27, 2024. https://tches.iacr.org/index.php/ToSC/article/view/9530.