Alex Biryukov Dmitry Khovratovich Ivica Nikolic Distinguisher and Related-Key Attack on the Full AES-256. 231-249 2009 CRYPTO http://dx.doi.org/10.1007/978-3-642-03356-8_14 conf/crypto/2009 db/conf/crypto/crypto2009.html#BiryukovKN09