Cube Testers and Key Recovery Attacks On Reduced-Round MD6 and Trivium.
J. Aumasson, I. Dinur, W. Meier, and A. Shamir. Symmetric Cryptography, volume 09031 of Dagstuhl Seminar Proceedings, Schloss Dagstuhl - Leibniz-Zentrum für Informatik, Germany, (2009)