How to Protect DES Against Exhaustive Key Search (an Analysis of DESX (2001)

by Joe Kilian, Phillip Rogaway
Venue:J. Cryptology