Judy H. Moore, Gustavus J. Simmons: Cycle Structures of the DES with Weak and Semi-Weak Keys. CRYPTO 1986: 9-32