Proving Resistance Against Infinitely Long Subspace Trails: How to Choose the Linear Layer. ToSC [Internet]. 2021 Jun. 11 [cited 2024 Dec. 27];2021(2):314-52. Available from: https://tches.iacr.org/index.php/ToSC/article/view/8913