L. R. Knudsen, “Cryptanalysis of LOKI91”, DPB, vol. 22, no. 440, May 2003.