As of 2008, the best published cryptanalysis on the Twofish block cipher is a truncated differential cryptanalysis of the full 16-round version. The paper claims that the probability of truncated differentials attacks is 2 per block and that it will take about 2 chosen plaintexts (32 PiB worth of data) to find a good pair of truncated differentials.