Linear Cryptanalysis of Simplified AES Under Change of S-Box
Algebraic Techniques in Linear Cryptanalysis
Multiple linear cryptanalysis