2022. More Inputs Makes Difference: Implementations of Linear Layers Using Gates with More Than Two Inputs. IACR Transactions on Symmetric Cryptology. 2022, 2 (Jun. 2022), 351–378. DOI:https://doi.org/10.46586/tosc.v2022.i2.351-378.