International Association for Cryptologic Research (IACR)
Abstract
The low degree relation for algebraic attacks on E0 combiner given in \cite{DBLP:conf/crypto/ArmknechtK03}
had an error. The correct version of low degree relation for the E0 combiner for use in algebraic attack is given