My understanding is that NSA&#x27;s changes to DES were all in the s-boxes, and that it was the s-box changes that hardened it against differential cryptanalysis. I think there&#x27;s even a story that tries to explain how they did it (randomly generating s-boxes selecting the ones least vulnerable to the attack).