if we assume that the s-boxes in DES were optimal. that is for each s-box, every cell in the DDT equals to 4. is there a differential characteristic in a good probability?
$\begingroup$
$\endgroup$
-
1$\begingroup$ See The Data Encryption Standard (DES) and its strength against attacks by Don Coppersmith. $\endgroup$ – kelalaka Jan 9 at 10:11
