Cryptanalysis of the Mercy Block Cipher

The Mercy block cipher is examined, and a differential attack is shown. Using this differential, a method of distinguishing the cipher from a random permutation is given.