Differential cryptanalysis of FEAL and N-hash (1991)

by E Biham, A Shamir
Venue:In Proc. EUROCRYPT 91, Lecture Notes in Computer Science