From Differencial Cryptanalysis to Ciphertext-Only Attacks (1998)

by A Biryukov, E Kushilevitz
Venue:Advances in Cryptology, -CRYPTO'98, Proceedings, LNCS