L. R. Knudsen, “Practically Secure Feistel Ciphers”, DPB, bd. 13, nr. 472, mar. 1994.