Matsui's paper on Linear Cryptanalysis of DES
Confusion is from notation differences between standard DES notation and Matsui's notation. After reading this: Matsui&#39;s Linear attack on DES P box
and make some rearrangements I can find the solution.