Fig. 2From: Multidimensional linear cryptanalysis with key difference invariant bias for block ciphersAttack on 25-round LBlockBack to article page