How Fast can be Algebraic Attacks on Block Ciphers?.

Nicolas Courtois How Fast can be Algebraic Attacks on Block Ciphers?. 2007 Symmetric Cryptography http://drops.dagstuhl.de/opus/volltexte/2007/1013 conf/dagstuhl/2007P7021 db/conf/dagstuhl/P7021.html#Courtois07