Go to slide 16

Differential Cryptanalysis