A Tutorial on Linear and Differential Cryptanalysis

symmetric-key block ciphers: linear cryptanalysis [1] and differential cryptanalysis [2]. ... Biham and Shamir at CRYPTO ’90 to attack DES and eventually the details of the attack were packaged as a book [5]. Although the early target of both attacks was DES, the wide

  Crypto