Pascal Junod On the Optimality of Linear, Differential, and Sequential Distinguishers. 17-32 2003 conf/eurocrypt/2003 EUROCRYPT http://link.springer.de/link/service/series/0558/bibs/2656/26560017.htm db/conf/eurocrypt/eurocrypt2003.html#Junod03