3-subset meet-in-the-middle attack