Differential cryptanalysis: Difference between revisions

Revision as of 08:22, 15 October 2018

Revision as of 08:58, 13 February 2019

Line 7:

While DES was designed with resistance to differential cryptanalysis in mind, other contemporary ciphers proved to be vulnerable. An early target for the attack was the [[FEAL]] block cipher. The original proposed version with four rounds (FEAL-4) can be broken using only eight [[Chosen-plaintext attack|chosen plaintexts]], and even a 31-round version of FEAL is susceptible to the attack. In contrast, the scheme can successfully cryptanalyze DES with an effort on the order 2⁴⁷ chosen plaintexts.

123

==Attack mechanics==