Biclique Cryptanalysis on the Full Crypton-256 and mCrypton-128

Figure 3

Recomputation in the backward direction of Crypton-256.