L. Grassi, C. Rechberger, and S. Rønjom, “Subspace Trail Cryptanalysis and its Applications to AES”, ToSC, vol. 2016, no. 2, pp. 192–225, Feb. 2017, doi: 10.13154/tosc.v2016.i2.192-225.