David Wong hasn't been at NCC Cryptography for a long time, so I assume we'll be waiting a long time before we get to Linear and Differential cryptanalysis, but if that's a thing you're interested in, what you want is the Heys tutorial:<p><a href="http://www.cs.bc.edu/~straubin/crypto2017/heys.pdf" rel="nofollow">http://www.cs.bc.edu/~straubin/crypto2017/heys.pdf</a><p>My recommendation: print it out to a PDF with huge margins so you can make notes, and then work through all the worked examples.