Differential-linear cryptanalysis

Summary