Marco Macchetti: Cryptanalysis of AES and Camellia with Related S-boxes. AFRICACRYPT 2013: 208-221