BGEAttack: round key extraction, may be buggy