I've written a preliminary version in https://github.com/phma/Kaftor.jl . I haven't yet run statistics or cryptanalysis on it; I've been tuning the multithreading. Pierre -- li ze te'a ci vu'u ci bi'e te'a mu du li ci su'i ze te'a mu bi'e vu'u ci