Linear Cryptanalysis of LOKI and s2DES. - Toshio Tokita; Tohru Sorimachi; Mitsuru Matsui (ASIACRYPT, 1994)