In this paper, we present a detailed tutorial on linear cryptanalysis and differential
cryptanalysis, the two most significant attacks applicable to symmetric-key block ciphers. The …

This paper describes the CAST design procedure for constructing a family of DES-like
Substitution-Permutation Network (SPN) cryptosystems which appear to have good …

Tracking bits through block ciphers and optimizing attacks at hand is one of the tedious task
symmetric cryptanalysts have to deal with. It would be nice if a program will automatically …

Despite their widespread usage in block cipher security, linear and differential cryptanalysis
still lack a robust treatment of their success probability, and the success chances of these …

Abstract In the SPN (Substitution-Permutation Network) structure, it is very important to
design a diffusion layer to construct a secure block cipher against differential cryptanalysis …

This paper reports on an improvement of Matsui's linear cryptanalysis that reduces the
complexity of an attack with algorithm 2, by taking advantage of the Fast Fourier Transform …

Linear cryptanalysis and differential cryptanalysis are the most important methods of attack
against block ciphers. Their efficiency have been demonstrated against several ciphers …

In [9] Matsui introduced a new method of cryptanalysis, called Linear Cryptanalysis. This
method was used to attack DES using 2 47 known plaintexts. In this paper we formalize this …

Linear cryptanalysis, along with differential cryptanalysis, is an important tool to evaluate the
security of block ciphers. This work introduces a novel extension of linear cryptanalysis: zero …

Differential cryptanalysis analyzes ciphers by studying the development of differences
during encryption. Linear cryptanalysis is similar but is based on studying approximate …