Proving Resistance Against Invariant Attacks: How to Choose the Round Constants.

Christof Beierle, Anne Canteaut, Gregor Leander, Yann Rotella

Browse the full CRYPTO paper archive.