Grassi, L.; Rechberger, C.; Rønjom, S. Subspace Trail Cryptanalysis and Its Applications to AES. ToSC 2017, 2016 (2), 192-225. https://doi.org/10.13154/tosc.v2016.i2.192-225.