How to Protect DES Against Exhaustive Key Search.

Joe Kilian, Phillip Rogaway

Browse the full CRYPTO paper archive.