Algebraic Attacks Using Binary Decision Diagrams