Methods of linear and differential relations in cryptography. - Malyshev, Fedor M. (Discrete Mathematics & Applications, 2024)