in 2004, a fault attack was published on the block cipher. the basic idea was to introduce a few deliberate faults in the intermediate calculations, making it possible to deduce the last eight round keys. from this, the final key can be computed.