Conditional Linear Cryptanalysis – Cryptanalysis of DES with Less Than 242 Complexity. ToSC. 2018;2018(3):215-264. doi:10.13154/tosc.v2018.i3.215-264