Problems with the Linear Cryptanalysis of DES Using More Than One Active S-box per Round.

Uwe Blcher, Markus Dichtl

Browse the full FSE paper archive.