A while ago, Hellman introduced a time-memory tradeoff for chosen plaintext attack on block ciphers.
There is an innovation due Rivest using a concept of 'distinguished points'. I am looking for the original reference to Rivest's contribution. All references I have found to Rivest point me to the book
D. Denning, Cryptography and Data Security , p. 100, Addison-Wesley, 1982
which gives only a few sentence description of Rivest's idea and no citation to any paper of Rivest on this topic.