On correlation between the order of S-boxes and the strength of DES (1995)

by M Matsui
Venue:in Proceedings of Eurocrypt94 (A. De Santis, ed.),no. 950 in Lecture Notes in Computer Science