Differential Cryptanalysis of the DES