Invariant Subspace Attack Against Midori64 and The Resistance Criteria for S-box Designs. ToSC. 2016;2016(1):33-56. doi:10.13154/tosc.v2016.i1.33-56