Skip navigation

Linear and Differential Cryptanalysis

  • We experiment on two powerful cryptanalysis techniques applied to symmetric-key block ciphers: linear cryptanalysis and differential cryptanalysis. Linear cryptanalysis was introduced by Matsui at EUROCRYPT as a theoretical attack on the Data Encryption Standard (DES) and later successfully used in the practical cryptanalysis of DES; differential cryptanalysis was first presented by Biham and Shamir at CRYPTO to attack DES. Although the early target of both attacks was DES, the wide applicability of both attacks to numerous other block ciphers has solidified the preeminence of both cryptanalysis techniques in the consideration of the security of all block ciphers.