4
$\begingroup$

How do you prove that a cipher is resistant to differential cryptanalysis? It's said that Rijndael has been proven resistance to differential cryptanalysis. How do cryptographers do that?

Improve this question
$\endgroup$
4
  • $\begingroup$ possible duplicate of How do I apply differential cryptanalysis to a block cipher? $\endgroup$
    – rath
    Commented Jul 14, 2013 at 23:41
  • 1
    $\begingroup$ Why is this a duplicate? The other is a question about how to apply differential cryptanalysis, and this question is about proving a function resistant to differential cryptanalysis. $\endgroup$
    – Gavriel Feria
    Commented Jul 16, 2013 at 0:26
  • $\begingroup$ the keyword being 'possible' duplicate. $\endgroup$
    – rath
    Commented Jul 16, 2013 at 1:28
  • $\begingroup$ rath, you can add possible to any sentence and you can make it valid. So I think you are being a big harsh here. $\endgroup$
    – tony9099
    Commented Mar 30, 2015 at 16:40

1 Answer 1

Reset to default
5
$\begingroup$

The design documents for Rijndael explain exactly how the designers proved its resistance to differential cryptanalysis.

Read their submission to the AES competition process, particularly Section 8.2 and the Annex. To understand their approach, it will probably help to understand differential cryptanalysis and read some of the related literature. You can find a more detailed explanation in their book, The Design of Rijndael: AES.

You might enjoy the following research papers:

Improve this answer
$\endgroup$

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.