Integral cryptanalysis

Integral cryptanalysis is a method of cryptanalysis invented by Lars Knudsen. It is an extension of differential cryptanalysis. Differential analysis looks at pairs of inputs that differ in only one bit position, with all other bits identical. Integral analysis, for block size b, holds b-k bits constant and runs the other k through all 2^k possibilities. For k=1, this is just differential cryptanalysis, but with k>1, it is a new technique.

The method is also known as the Square attack because it was first applied to square, a block cipher designed by Joan Daemen and Vincent Rijmen who later designed AES. In fact, the cipher and the attack were published at the same conference; the developers had given Knudsen a preprint of their paper.