On the Wrong Key Randomisation and Key Equivalence Hypotheses in Matsui's Algorithm 2

Talk at FSE 2013. Andrey Bogdanov and Elmar Tischhauser. See http://www.iacr.org/cryptodb/data/paper.php?pubkey=25073