Di erential Cryptanalysis of the Full 16-round DES (1992)

by E Biham, A Shamir
Venue:In Proceedings of Crypto