differential cryptanalysis

Practical attacks on the Maelstrom-0 compression function