Gaoli Wang Nathan Keller Orr Dunkelman The Delicate Issues of Addition with Respect to XOR Differences. 212-231 2007 conf/sacrypt/2007 Selected Areas in Cryptography http://dx.doi.org/10.1007/978-3-540-77360-3_14 db/conf/sacrypt/sacrypt2007.html#WangKD07