Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

How do you prove that a cipher is resistant to differential cryptanalysis? It's said that Rijndael has been proven resistance to differential cryptanalysis. How do cryptographers do that?

share|improve this question
possible duplicate of How do I apply differential cryptanalysis to a block cipher? – rath Jul 14 '13 at 23:41
Why is this a duplicate? The other is a question about how to apply differential cryptanalysis, and this question is about proving a function resistant to differential cryptanalysis. – Gavriel Feria Jul 16 '13 at 0:26
the keyword being 'possible' duplicate. – rath Jul 16 '13 at 1:28
rath, you can add possible to any sentence and you can make it valid. So I think you are being a big harsh here. – tony9099 Mar 30 '15 at 16:40
up vote 4 down vote accepted

The design documents for Rijndael explain exactly how the designers proved its resistance to differential cryptanalysis.

Read their submission to the AES competition process, particularly Section 8.2 and the Annex. To understand their approach, it will probably help to understand differential cryptanalysis and read some of the related literature. You can find a more detailed explanation in their book, The Design of Rijndael: AES.

You might enjoy the following research papers:

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.