Intro to differential & linear cryptanalysis?

[Perry E. Metzger]

I'm teaching a course in crypto this semester, and I'm trying to give
my students a thorough background on some deeper topics. There isn't
much on differential and linear cryptanalysis in Schneier or in the
Handbook of Applied Cryptography, but I'd like to give them a
grounding in the topic.

Can anyone suggest some papers or other source materials on the area
to use in the course?

-- 
Perry Metzger           [EMAIL PROTECTED]
--
"Ask not what your country can force other people to do for you..."