Di#erential Cryptanalysis of Feal and NHash, " EUROCRYPT'91 (0)

by E Biham, A Shamir