Eli Biham Orr Dunkelman Nathan Keller Linear Cryptanalysis of Reduced Round Serpent. 16-27 2001 conf/fse/2001 FSE http://link.springer.de/link/service/series/0558/bibs/2355/23550016.htm db/conf/fse/fse2001.html#BihamDK01