Talk:Differential equations of addition

The term differential equations of addition might be misleading in the context of differential cryptanalysis. We are in general not interested in finding solutions, but in counting them. The latter problem might be much harder - see Dumas, Lipmaa, Wallen. DMTCS 2008.