How to distinguish between a block cipher and a random permutation by lowering the input entropy | Publicación