Lars R. Knudsen Cryptanalysis of LOKI. 22-35 1991 conf/asiacrypt/1991 ASIACRYPT db/conf/asiacrypt/asiacrypt91.html#Knudsen91 http://dx.doi.org/10.1007/3-540-57332-1_2