On the need of Multipermutations: Cryptanalysis of MD4 and SAFER (1994)

by S Vaudenay
Venue:In Fast Software Encryption — FSE ’94, volume LNCS 1008