Differential Cryptanalysis

• Biham and Shamir, 1990

• A method that investigates the change in cryptographic strength when a change is made to the encryption algorithm

  • Almost any change made to the DES algorithm weakens it.
  • Is DES optimal then? Possibly but the point is moot...