Tag
differential-cryptanalysis
- Apr 28, 2026 Differential and Linear Cryptanalysis as Trail Counting The two classical attacks reduce to finding high-probability differentials and high-bias linear approximations, and both are bounded by the same active S-box count. cryptography
- May 15, 2024 How Differential Cryptanalysis Broke SHA-1 The modular-difference search, message-modification steps, and near-collision blocks that turn a 160-bit digest into two colliding PDFs, and why the margin was thinner than the bound implied. cryptography