1 N T T-Nippon T elegraph and Telephone Corporation :E2 :Ef ficient Encryption A lgorit hm.htt p :// info.isl.ntt.co.jp/ e22 K aoki, T Ichikaw a, M K anda, M M at sui, S M oriai, J Nakajima, T Tokita.Specif icat ion of Camellia-a 128-bit Block Ci pher.SAC′2000, Sev-enth Annual Workshop on Select ed A reas in C rypt ography, 2000.14 ~ 153 M K anda.Pract ical Secu rit y Evaluat ion A gainst Di ff erent ial and Linear A t tacks for Feist el Ciphers w it h S PN Round Function.SA C′2000.Seventh A nnual W orkshop on S elected Areas in Cryptography, 2000.14 ~ 154 M M atsui, T Tokit a.Cryptanalysi s of a Reduced Version of the Block Cipher E2.Fast S of tw are Encryption-6 thInt ernat ional Workshop, FSE′99, Lectu re N otes in Computer Sci ence 1636, 1999.71 ~ 805 S M oriai, M S ugi ta, K A oki, M K anda.S ecurity of E2 A gainst T runcated Dif ferential Cryptanalysi s.Select ed Areas in Crypt ography, 6 thAn-nual Internati onal Workshop, SA C′99, Lect ure N otes in Comput er S cience 1758, 2000.106 ~ 1176 L R K nudsen.Truncat ed and Higher O rder Dif ferentials.Fast Sof tw are Encrypti on-Second International Workshop, Lect ure N ot es in Com-puter Science 1008, 1995.196 ~ 211 |