Differential-linear cryptanalysis (1994)

by S K Langford, M E Hellman
Venue:Advances in Cryptology – Crypto ’94