Burton S. Kaliski Jr. Matthew J. B. Robshaw Linear Cryptanalysis Using Multiple Approximations. 26-39 http://dx.doi.org/10.1007/3-540-48658-5_4 1994 conf/crypto/1994 CRYPTO db/conf/crypto/crypto94.html#KaliskiR94