My understanding is that NSA's changes to DES were all in the s-boxes, and that it was the s-box changes that hardened it against differential cryptanalysis. I think there's even a story that tries to explain how they did it (randomly generating s-boxes selecting the ones least vulnerable to the attack).