https://www.davidwong.fr/blockbreakers/square_1_3rounds.html
https://eprint.iacr.org/2014/216.pdf