Distinguisher and related-key attack on the full AES (0)

by A Biryukov, D Khovratovich, I Nikolić