Live briefing
Everything about Linear cryptanalysis
Form of cryptanalysis
In cryptography, linear cryptanalysis is a general form of cryptanalysis based on finding affine approximations to the action of a cipher. Attacks have been developed for block ciphers and stream ciphers. Linear cryptanalysis is one of the two most widely used attacks on block ciphers; the other being differential cryptanalysis. Wikipedia →
🧭 Start here: a 6-step reading path
- Read the overview: Linear cryptanalysisA 5-minute orientation
- Skim a recent paper: Bounds for the Security of Ascon against Differential and Linear CryptanalysisInfluential work since 2022
- Pick up a classic book: Information Security and PrivacyThe most-reprinted book on the subject
- Read the landmark paper: A TUTORIAL ON LINEAR AND DIFFERENTIAL CRYPTANALYSISCited 161 times
- Go sideways: Block cipherA closely related topic
- Go sideways: Differential cryptanalysisA closely related topic
📖 Definitions
No dictionary entry for this exact phrase.
🗂️ The subject at a glance
🏆 Landmark papers (most cited)
A TUTORIAL ON LINEAR AND DIFFERENTIAL CRYPTANALYSIS
Linear hulls with correlation zero and linear cryptanalysis of block ciphers
Quantum Differential and Linear Cryptanalysis
Differential-Linear Cryptanalysis Revisited
Zero-correlation linear cryptanalysis of reduced-round LBlock
Boosting Differential-Linear Cryptanalysis of ChaCha7 with MILP
The Independence of Linear Approximations in Symmetric Cryptanalysis
Multidimensional Linear Cryptanalysis
🆕 Influential since 2022
Bounds for the Security of Ascon against Differential and Linear Cryptanalysis
Converting of Boolean Expression to Linear Equations, Inequalities and QUBO Penalties for Cryptanalysis
Differential-Linear Cryptanalysis of Reduced Round ChaCha
Cryptanalysis of DRPE using complex S-Box based on linear canonical transform
Quantum zero correlation linear cryptanalysis
📚 Books worth reading
Information Security and PrivacyColin Boyd · 2005
Decrypted SecretsFriedrich L. Bauer · 2000
Cryptography and network securityWilliam Stallings · 2006
Network and Parallel ComputingJames J. Park · 2012
Advanced Linear Cryptanalysis of Block and Stream CiphersP Junod, A. Canteaut · 2011- 📕Linear CryptanalysisTim Beyne, Vincent Rijmen · 2025
- 📕On the validity of certain hypotheses used in linear cryptanalysisZsolt Kukorelly · 1999
- 📕On the validity of certaim hypotheses used in linear cryptanalysisZsolt Kukorelly · 1999
Ranked by number of editions on Open Library, a rough measure of how lasting a book is.
🔗 Related topics
- Block cipher In cryptography, a block cipher is a deterministic algorithm that operates on fixed-length groups of bits, called blocks. Block ciphers are the elementary…
- Differential cryptanalysis Differential cryptanalysis is a general form of cryptanalysis applicable primarily to block ciphers, but also to stream ciphers and cryptographic hash…
- DES-X In cryptography, DES-X (or DESX) is a variant on the DES (Data Encryption Standard) symmetric-key block cipher intended to increase the complexity of a…
- FEAL In cryptography, FEAL (the Fast data Encipherment Algorithm) is a block cipher proposed as an alternative to the Data Encryption Standard (DES), and designed…
- COCONUT98 In cryptography, COCONUT98 (Cipher Organized with Cute Operations and N-Universal Transformation) is a block cipher designed by Serge Vaudenay in 1998…
- LOKI In cryptography, LOKI89 and LOKI91 are symmetric-key block ciphers designed as possible replacements for the Data Encryption Standard (DES). The ciphers…
- Differential-linear attack Introduced by Martin Hellman and Susan K. Langford in 1994, the differential-linear attack is a mix of both linear cryptanalysis and differential cryptanalysis…
- Piling-up lemma In cryptanalysis, the piling-up lemma is a principle used in linear cryptanalysis to construct linear approximations to the action of block ciphers. It…