DES Has No Per Round Linear Factors.

James A. Reeds, John L. Manferdelli

Browse the full CRYPTO paper archive.