Analysis of Involutional Ciphers:

by Alex Biryukov