Fig. 3From: Multidimensional linear cryptanalysis with key difference invariant bias for block ciphersData-time tradeoff for the attack on 24-round LBlockBack to article page