“Conditional Linear Cryptanalysis – Cryptanalysis of DES with Less Than 242 Complexity” (2018) IACR Transactions on Symmetric Cryptology, 2018(3), pp. 215–264. doi:10.13154/tosc.v2018.i3.215-264.