Talk:Linear cryptanalysis

WikiProject Cryptography / Computer science

This article is within the scope of WikiProject Cryptography, a collaborative effort to improve the coverage of Cryptography on Wikipedia. If you would like to participate, please visit the project page, where you can join the discussion and see a list of open tasks.

???

This article has not yet received a rating on the quality scale.

???

This article has not yet received a rating on the importance scale.

This article is supported by WikiProject Computer science.

It is intended that this article be included in WikiReader Cryptography, a WikiReader on the topic of cryptography. Help and comments for improving this article would be especially welcome. A tool for coordinating the editing and review of these articles is the daily article box.

edit · history · watch · refresh To-do list for Linear cryptanalysis:
Describe the statistical effect of a linear approximation. Describe how a bias can be used to recover a subkey. Discuss how characteristics can be used to find good linear approximations over several rounds. Provide a diagram

Comment from page

Well, in fact everybody knows (and Matsui himslef acknowledges ti in his paper) that LC was first invented by Hneri Gilbert and his student: see Anne Tardy-Corfdir, Henri Gilbert: A Known Plaintext Attack of FEAL-4 and FEAL-6, In Crypto'91, LNCS 576, Springer, pp. 172-181, 1992. —The preceding unsigned comment was added by 82.241.89.189 (talk • contribs) .

Hmm. Linear cryptanalysis seems to be widely attributed to Matsui. For example, Alex Biryukov, in his entry on "Linear Cryptanalysis" for the Encyclopedia of Cryptography and Data Security, asserted that the technique was introduced by Matsui in 1993. — Matt Crypto 18:44, 9 December 2005 (UTC)

↑Jump back a section

Last modified on 22 February 2006, at 12:37