Cryptanalysis of reduced variants of Rijndael. Available from: http://aes.nist.gov (2000)

by E Biham, N Keller