Yuanxi Dai, Yannick Seurin, John P. Steinberger, Aishwarya Thiruvengadam. Five Rounds are Sufficient and Necessary for the Indifferentiability of Iterated Even-Mansour. IACR Cryptology ePrint Archive, 2017:42, 2017. [doi]
@article{DaiSST17, title = {Five Rounds are Sufficient and Necessary for the Indifferentiability of Iterated Even-Mansour}, author = {Yuanxi Dai and Yannick Seurin and John P. Steinberger and Aishwarya Thiruvengadam}, year = {2017}, url = {http://eprint.iacr.org/2017/042}, researchr = {https://researchr.org/publication/DaiSST17}, cites = {0}, citedby = {0}, journal = {IACR Cryptology ePrint Archive}, volume = {2017}, pages = {42}, }