How to Backdoor a Block Cipher
I have written an elementary tutorial and a first proof of concept about how to backdoor a block cipher in a quite general setting. Potentially it applies to any block cipher. Success is not guaranteed though, see the paper. ADDED 2 JAN 2019: a new paper shows that invariants of higher degree are substantially more powerful. …