Stefan Lucks On Security of the 128-Bit Block Cipher DEAL. 60-70 http://link.springer.de/link/service/series/0558/bibs/1636/16360060.htm 1999 conf/fse/1999 FSE db/conf/fse/fse99.html#Lucks99