a citation sought..

I'm looking for the paper of last year that suggested how insecure 56 bit DES is against NSA-scale computers. Citation? Or if it's on line, so much the better. thanks.. herb