Modeling large S-box in MILP and a (related-key) differential attack on full round PIPO-64/128

From MaRDI portal