Multiple differential-zero correlation linear cryptanalysis of reduced-round CAST-256. - Massoud Hadian Dehkordi; Roghayeh Taghizadeh (J. Math. Cryptol., 2017)