Editing Block cipher (section)

===Linear cryptanalysis===
{{Main|Linear cryptanalysis}}

''[[Linear cryptanalysis|A linear cryptanalysis]]'' is a form of cryptanalysis based on finding [[affine transformation|affine]] approximations to the action of a [[cipher]]. Linear cryptanalysis is one of the two most widely used attacks on block ciphers; the other being [[differential cryptanalysis]].<ref>{{Cite journal|last=Matsui|first=Mitsuru|title=Linear Cryptanalysis of DES Cipher|url=http://ftp.esat.kuleuven.ac.be/pub/cosic/rijmen/misc/lin_cr.ps|journal=Mitsubishi Electric Corporation|volume=1|issue=3|pages=43|via=Computer & Information Systems Laboratory}}</ref>

The discovery is attributed to [[Mitsuru Matsui]], who first applied the technique to the [[FEAL]] cipher (Matsui and Yamagishi, 1992).<ref name="FEAL_linear">{{cite conference |author1=Matsui, M. |author2=Yamagishi, A. |name-list-style=amp | title = A new method for known plaintext attack of FEAL cipher | book-title = Advances in Cryptology – [[EUROCRYPT]] 1992 }}</ref>