Algebraic key-recovery attacks on reduced-round Xoofff
scientific article; zbMATH DE number 7498220