Biham, E.; Perle, S. Conditional Linear Cryptanalysis – Cryptanalysis of DES With Less Than 242 Complexity. ToSC 2018, 2018, 215-264.