Decorrelation: a theory for block cipher security (0)

by S Vaudenay
Venue:Journal of Cryptology