Cryptanalysis of block ciphers with overdefined systems of equations (2003)

by N Courtois, J Pieprzyk
Venue:Advances in cryptology–ASIACRYPT 2002, LNCS 2501