How to prove a cipher resistant to differential cryptanalysis?

Question

How do you prove that a cipher is resistant to differential cryptanalysis? It's said that Rijndael has been proven resistance to differential cryptanalysis. How do cryptographers do that?

possible duplicate of How do I apply differential cryptanalysis to a block cipher? — rath, Jul 14 '13 at 23:41
Why is this a duplicate? The other is a question about how to apply differential cryptanalysis, and this question is about proving a function resistant to differential cryptanalysis. — Gavriel Feria, Jul 16 '13 at 00:26
rath, you can add possible to any sentence and you can make it valid. So I think you are being a big harsh here. — tony9099, Mar 30 '15 at 16:40

score 5 · Accepted Answer · answered Jul 15 '13 at 18:45

The design documents for Rijndael explain exactly how the designers proved its resistance to differential cryptanalysis.

Read their submission to the AES competition process, particularly Section 8.2 and the Annex. To understand their approach, it will probably help to understand differential cryptanalysis and read some of the related literature. You can find a more detailed explanation in their book, The Design of Rijndael: AES.

You might enjoy the following research papers:

How to prove a cipher resistant to differential cryptanalysis?

1 Answers1

Linked