Linear and differential cryptanalysis Linear crypt tanalysis was introduced by Matsui at eurocrypt 93 as a theoretical attack on DES and later successfully used in the practical cryptanalysis of ES Differential cryptanalysis was first presented by Biham and Shamir at CRYPTo 90 to attack des 1515 Linear and Differential cryptanalysis • Linear cryptanalysis was introduced by Matsui at EUROCRYPT ’93 as a theoretical attack on DES and later successfully used in the practical cryptanalysis of DES • Differential cryptanalysis was first presented by Biham and Shamir at CRYPTO ’90 to attack DES