Iterative Characteristics of DES and s DES (1993)

by L R Knudsen
Venue:Advances in Cryptology | CRYPTO '92