Vitaly V. Shorin Vadim V. Jelezniakov Ernst M. Gabidulin Linear and Differential Cryptanalysis of Russian GOST. 538-547 2001 6 Electronic Notes in Discrete Mathematics http://dx.doi.org/10.1016/S1571-0653(04)00206-9 db/journals/endm/endm6.html#ShorinJG01