How to Protect DES against Exhaustive Search (1996)

by J Kilian, P Rogaway
Venue:In Advances in Cryptology|Proceedings of CRYPTO '96, pp267{278