if we assume that the s-boxes in DES were optimal. that is for each s-box, every cell in the DDT equals to 4. is there a differential characteristic in a good probability?
$\begingroup$
$\endgroup$
1
-
1$\begingroup$ See The Data Encryption Standard (DES) and its strength against attacks by Don Coppersmith. $\endgroup$– kelalakaJan 9 '20 at 10:11
Add a comment
|