How do you prove that a cipher is resistant to differential cryptanalysis? It's said that Rijndael has been proven resistance to differential cryptanalysis. How do cryptographers do that?

  • $\begingroup$ possible duplicate of How do I apply differential cryptanalysis to a block cipher? $\endgroup$
    – rath
    Jul 14 '13 at 23:41
  • 1
    $\begingroup$ Why is this a duplicate? The other is a question about how to apply differential cryptanalysis, and this question is about proving a function resistant to differential cryptanalysis. $\endgroup$ Jul 16 '13 at 0:26
  • $\begingroup$ the keyword being 'possible' duplicate. $\endgroup$
    – rath
    Jul 16 '13 at 1:28
  • $\begingroup$ rath, you can add possible to any sentence and you can make it valid. So I think you are being a big harsh here. $\endgroup$
    – tony9099
    Mar 30 '15 at 16:40

The design documents for Rijndael explain exactly how the designers proved its resistance to differential cryptanalysis.

Read their submission to the AES competition process, particularly Section 8.2 and the Annex. To understand their approach, it will probably help to understand differential cryptanalysis and read some of the related literature. You can find a more detailed explanation in their book, The Design of Rijndael: AES.

You might enjoy the following research papers:


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.