How to protect DES against exhaustive search (1996)

by J Kilian, P Rogaway
Venue:Advances in Cryptology--Crypto 96