Fig. 4From: Multidimensional linear cryptanalysis with key difference invariant bias for block ciphersData-time tradeoff for the attack on 27-round TWINE-128Back to article page