2017. MILP Modeling for (Large) S-boxes to Optimize Probability of Differential Characteristics. IACR Transactions on Symmetric Cryptology. 2017, 4 (Dec. 2017), 99–129. DOI:https://doi.org/10.13154/tosc.v2017.i4.99-129.