Conditional Linear Cryptanalysis – Cryptanalysis of DES with Less Than 242 Complexity. (2018). IACR Transactions on Symmetric Cryptology, 2018(3), 215-264. https://doi.org/10.13154/tosc.v2018.i3.215-264