E. Biham and S. Perle, “Conditional Linear Cryptanalysis – Cryptanalysis of DES with Less Than 242 Complexity”, ToSC, vol. 2018, no. 3, pp. 215–264, Sep. 2018.