Differential Cryptanalysis of the Full 16-round DES (1992)

by Eli Biham, Adi Shamir
Venue:In Advances in Cryptology — CRYPTO