DES is not a Group.

Keith W. Campbell, Michael J. Wiener

Browse the full CRYPTO paper archive.