Linear cryptanalysis method for DES cipher (1994)

by M Matsui
Venue:in Advances in Cryptology: Eurocrypt '93