Take the 2-minute tour ×
Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. It's 100% free, no registration required.

How do you prove that a cipher is resistant to differential cryptanalysis? It's said that Rijndael has been proven resistance to differential cryptanalysis. How do cryptographers do that?

share|improve this question
    
possible duplicate of How do I apply differential cryptanalysis to a block cipher? –  rath Jul 14 '13 at 23:41
1  
Why is this a duplicate? The other is a question about how to apply differential cryptanalysis, and this question is about proving a function resistant to differential cryptanalysis. –  Gavriel Feria Jul 16 '13 at 0:26
    
the keyword being 'possible' duplicate. –  rath Jul 16 '13 at 1:28
add comment

1 Answer

up vote 3 down vote accepted

The design documents for Rijndael explain exactly how the designers proved its resistance to differential cryptanalysis.

Read their submission to the AES competition process, particularly Section 8.2 and the Annex. To understand their approach, it will probably help to understand differential cryptanalysis and read some of the related literature. You can find a more detailed explanation in their book, The Design of Rijndael: AES.

You might enjoy the following research papers:

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.