An Analysis of the CAST-256 Cipher (1999)

by C Adams, H M Heys, S E Tavares, M Wiener