Does resistance to linear cryptanalysis mean that there is *no* linear
approximation to the entire function with a large enough bias to
exploit?
-- 
Mike Stay
Programmer / Crypto guy
AccessData Corp.
mailto:[EMAIL PROTECTED]

Reply via email to