Impossible Differential Cryptanalysis
Revisiting Impossible Differential Cryptanalysis and Expanding the Application of MILP in Impossible Differential Attack