Critical Points

• 10 round do not provide a big margin of security. (“adequate” security)

• The keyshedule is has some not so nice properties:

  • We can derive the encryption key from any round key very easily.
  • The first round key is the encryption key.
  • ...

• Byte structure

• Too Mathematical: There is a “simple” formular for the whole cipher.