Conventional Security Analysis - A Classical Introduction to Cryptography: Applications for Communications Security - page 98

405c0000 04000000

⊕ E

⊕

40080000 0a000000 00 10 00 00

00 00 00 00

04000000

1
4

Round #1 P S p =

04000000 00540000

⊕

E
⊕

04000000 00100000 00 00 12 30

00 00 00 00

00540000

5
128

p =

Round #2 P S

00540000 0

⊕

E
⊕

0 0 0 0

p = 1

Round #3 P S

0 00540000

⊕

E
⊕

04000000 00100000 00 00 12 30

00 00 00 00

00540000

5
128

Round #4 P S p =

00540000 04000000

⊕

E
⊕

40080000 0a000000 00 10 00 00

00 00 00 00

04000000

1
4

p =

Round #5 P S

04000000 405c0000

⊕

E
⊕

? 0 ?? 0000

14 00 13 70
00 00 00 00

405c0000

p = 1

Round #6 P S

405c0000 ?

⊕

E
⊕

p = 1

Round #7 P S

........

?

⊕

E
⊕

? ? . ?? .... ?? .. ?? ??

.. .. .. ..

........

p = 1

Round #8 P S

........ ........

Figure 4.2. Differential cryptanalysis of DES reduced to eight rounds.