Risto M. Hakala Kaisa Nyberg Linear Distinguishing Attack on Shannon. 297-305 2008 ACISP http://dx.doi.org/10.1007/978-3-540-70500-0_22 conf/acisp/2008 db/conf/acisp/acisp2008.html#HakalaN08