Low-Memory Attacks Against Two-Round Even-Mansour Using the 3-XOR Problem
Channel: IACR
Date: 2019-10-04

Paper by Gaëtan Leurent, Ferdinand Sibleyras presented at Crypto 2019
See https://iacr.org/cryptodb/data/paper.php?pubkey=29887