Differential Cryptanalysis on Block Cipher Skinny with MILP Program

Table 3

The DDT of s-box for Skinny-64/192.

	0x0	0x1	0x2	0x3	0x4	0x5	0x6	0x7	0x8	0x9	0xa	0xb	0xc	0xd	0xe	0xf
0x0	16	0	0	0	0	0	0	0	0	0	0	0	0	0	0	0
0x1	0	0	0	0	0	0	0	0	4	4	4	4	0	0	0	0
0x2	0	4	0	4	0	4	4	0	0	0	0	0	0	0	0	0
0x3	0	0	0	0	0	0	0	0	2	2	2	2	2	2	2	2
0x4	0	0	4	0	0	0	2	2	0	0	0	4	2	2	0	0
0x5	0	0	4	0	0	0	2	2	0	0	4	0	2	2	0	0
0x6	0	2	0	2	2	0	0	2	2	0	2	0	0	2	2	0
0x7	0	2	0	2	2	0	0	2	0	2	0	2	2	0	0	2
0x8	0	0	0	0	4	4	0	0	0	0	0	0	2	2	2	2
0x9	0	0	0	0	4	4	0	0	0	0	0	0	2	2	2	2
0xa	0	0	0	0	0	4	4	0	2	2	2	2	0	0	0	0
0xb	0	4	0	4	0	0	0	0	0	0	0	0	2	2	2	2
0xc	0	0	4	0	0	0	2	2	4	0	0	0	0	0	2	2
0xd	0	0	4	0	0	0	2	2	0	4	0	0	0	0	2	2
0xe	0	2	0	2	2	0	0	2	0	2	0	2	0	2	2	0
0xf	0	2	0	2	2	0	0	2	2	0	2	0	2	0	0	2