Quadratic Relation of S-box and its Application to the Linear Attack of Full Round DES (1998)

by Takeshi Shimoyama, Toshinobu Kaneko
Venue:Advances in Cryptology - Crypto’98, volume 1462 of LNCS