Differential Cryptanalysis on Block Cipher Skinny with MILP Program

Table 2

The input and output differential distribution of Skinny-64/192’s s-box.

Input difference	Output difference
(x0, x1, x2, x3)	(y0, y1, y2, y3)
0000	0000
0001	1000 1001 1010 1011
0010	0001 0011 0101 0110
0011	1000 1001 1010 1011 1100 1101 1110 1111
0100	0010 0110 0111 1011 1100 1101
0101	0010 0110 0111 1010 1100 1101
0110	0001 0011 0100 0111 1000 1010 1101 1110
0111	0001 0011 0100 0111 1001 1011 1100 1111
1000	0100 0101 1100 1101 1110 1111
1001	0100 0101 1100 1101 1110 1111
1010	0101 0110 1000 1001 1010 1011
1011	0001 0011 1100 1101 1110 1111
1100	0010 0110 0111 1000 1110 1111
1101	0010 0110 0111 1001 1110 1111
1110	0001 0011 0100 0111 1001 1011 1101 1110
1111	0001 0011 0100 0111 1000 1010 1100 1111