From Differential Cryptanalysis to Ciphertext-Only Attacks.

Alex Biryukov, Eyal Kushilevitz

Browse the full CRYPTO paper archive.