Cryptanalysis of DES with a Reduced Number of Rounds: Sequences of Linear Factors in Block Ciphers