L. R. Knudsen, “Iterative Characteristics of DES and S^2-DES”, DPB, vol. 22, no. 439, May 1993.