Martin Hell Thomas Johansson On the Problem of Finding Linear Approximations and Cryptanalysis of Pomaranch Version 2. 220-233 2006 conf/sacrypt/2006 Selected Areas in Cryptography http://dx.doi.org/10.1007/978-3-540-74462-7_16 db/conf/sacrypt/sacrypt2006.html#HellJ06a