Biham, Eli, and Stav Perle. “Conditional Linear Cryptanalysis – Cryptanalysis of DES With Less Than 242 Complexity”. IACR Transactions on Symmetric Cryptology, vol. 2018, no. 3, Sept. 2018, pp. 215-64, doi:10.13154/tosc.v2018.i3.215-264.