The One-Round Functions of the DES Generate the Alternating Group.

Ralph Wernsdorf The One-Round Functions of the DES Generate the Alternating Group. 99-112 http://link.springer.de/link/service/series/0558/bibs/0658/06580099.htm 1992 EUROCRYPT db/conf/eurocrypt/eurocrypt92.html#Wernsdorf92