Generalized related-key rectangle attacks on block ciphers with linear key schedule: applications to SKINNY and GIFT.