Walter T. Penzhorn G. J. Kühn Computation of Low-Weight Parity Checks for Correlation Attacks on Stream Ciphers. 74-83 1995 conf/ima/1995 IMA Conf. db/conf/ima/ima1995.html#PenzhornK95