Truncated differential cryptanalysis of five rounds of Salsa20

[ciphergoth]

This is what I've been doing in my spare time for the last couple of weeks:

Truncated differential cryptanalysis of five rounds of Salsa20 (PDF)

(discussion, Wikipedia on Salsa20).

This doesn't break the whole cipher, just a seriously reduced version.

Comments

[ciphergoth.livejournal.com]

An-Ping's paper is a load of garbage; there's no analysis there, only a catalogue of mistakes. Unfortunately, I can't say that on Wikipedia, becuase it's not NPOV. Bernstein hasn't reacted with hostility to my cryptanalysis, quite the reverse.