[Boneh-crypto-course] If DES were linear... what???

[Jason Orendorff]

On Tue, Mar 27, 2012 at 11:53 PM, Jim Blandy <jimb at red-bean.com> wrote:
> Okay, that's a relief. I did understand that the thing was trivial if
> linear; he just says something about being able to recover the key with 832
> chosen plaintexts, which I didn't grasp at all.

Posted https://class.coursera.org/crypto/forum/thread?thread_id=695

-j