Decorrelation: a Theory for Block Cipher Security (2003)

by S Vaudenay
Venue:in Journal of Cryptology