1. History of cryptanalysis, simple ciphers, Enigma.

2. Shannon's theory and Feistel's ideas: SPNs, Lucifer & DES.

3. Birthday paradox and its applications.
Properties of random functions/permutations.

4. Tradeoffs (Hellman's tradeoff for one-way functions),
(Biryukov-Shamir's tradeoff for stream ciphers).

5. Is DES a pure cipher? Coppersmith's estimates for the group
size of DES.

6. Differential cryptanalysis  and its extensions.

7. Linear cryptanalysis and its extensions.

8. Higher order differentials and interpolation attacks.

9. Attacks using impossible differentials.

10. Slide attacks on iterative and auto-key constructions.

11. Multiset attacks on SPNs (SASAS). Square attack on round-reduced Rijndael.

12. Gilbert-Minier collision attack on round reduced Rijndael. Boomerang attacks by Wagner.

13. Other topics if time permits.  (attacks on double/triple encryption,
attacks on hash functions, stream ciphers).