“On the Lower Bound of Cost of MDS Matrices”. IACR Transactions on Symmetric Cryptology 2022, no. 4 (December 7, 2022): 266–290. Accessed December 27, 2024. https://tches.iacr.org/index.php/ToSC/article/view/9979.