Recovering early SEED round keys with byte-wise CPA and key-schedule inversion
Recovering an ARIA-128 master key with first-round and ciphertext-side CPA
