Comment by noamsml

That's what he's saying. If this is the NSA telling us what the s-boxes for DSA are, what's the equivalent to the DSA understanding differential cryptanalysis when designing the s-boxes?