linear cryptanalysis

general form of cryptanalysis based on finding affine approximations to the action of a cipher