"Distinguishing Attacks on T-Functions."

Simon Künzli, Pascal Junod, Willi Meier (2005)
a service of Schloss Dagstuhl - Leibniz Center for Informatics