On probability of success in linear and differential cryptanalysis
scientific article