Security of Reduced Version of the Block Cipher Camellia against Truncated and Impossible Differential Cryptanalysis