“Conditional Linear Cryptanalysis – Cryptanalysis of DES with Less Than 242 Complexity”, ToSC, vol. 2018, no. 3, pp. 215–264, Sep. 2018, doi: 10.13154/tosc.v2018.i3.215-264.