"Conditional Differential Cryptanalysis of Trivium and KATAN."

Simon Knellwolf, Willi Meier, María Naya-Plasencia (2011)
a service of Schloss Dagstuhl - Leibniz Center for Informatics