On the Complexity of Impossible Differential Cryptanalysis

<div>The relationship in <span class="nowrap"><svg height="8.73791pt" id="M72" style="vertical-align:-0.04981995pt" version="1.1" viewbox="-0.0498162 -8.68809 9.76877 8.73791" width="9.76877pt" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><g transform="matrix(.013,0,0,-0.013,0,0)"><path d="M691 0L459 662H291L50 0H95L173 209H441L518 0H691ZM630 44H547L345 618H428L630 44ZM425 253H189L308 585H310L425 253Z" id="g197-12"></path></g></svg>,</span> <span class="nowrap"><svg height="12.0001pt" id="M73" style="vertical-align:-0.04990005pt" version="1.1" viewbox="-0.0498162 -11.9502 9.76877 12.0001" width="9.76877pt" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><rect height="0.65243" width="9.66914" x="0" y="-11.248"></rect><g transform="matrix(.013,0,0,-0.013,0,0)"><path d="M691 0L459 662H291L50 0H95L173 209H441L518 0H691ZM630 44H547L345 618H428L630 44ZM425 253H189L308 585H310L425 253Z" id="g197-12"></path></g></svg>,</span> and <span class="nowrap"><svg height="11.5564pt" id="M74" style="vertical-align:-2.26807pt" version="1.1" viewbox="-0.0498162 -9.28833 25.5447 11.5564" width="25.5447pt" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><g transform="matrix(.013,0,0,-0.013,0,0)"><path d="M494 514C482 587 419 712 303 712C238 712 174 667 174 603C174 561 205 514 249 449C219 438 187 422 162 407C93 366 23 283 23 177C23 69 87 -12 190 -12C244 -12 288 5 328 33C406 87 444 170 444 249C444 329 404 391 331 475C265 550 222 605 222 627C222 647 238 657 267 657C355 657 421 585 484 499L494 514ZM359 234C359 143 319 30 219 30C172 30 114 75 114 178C114 275 163 343 195 378C212 397 241 415 269 425C305 382 359 313 359 234Z" id="g113-226"></path></g><g transform="matrix(.013,0,0,-0.013,6.722,0)"><path d="M300 -147C201 -63 143 98 143 270S200 602 300 686L282 710C136 610 70 450 70 271V270C70 89 136 -72 282 -170L300 -147Z" id="g113-41"></path></g><g transform="matrix(.013,0,0,-0.013,11.22,0)"><path d="M691 0L459 662H291L50 0H95L173 209H441L518 0H691ZM630 44H547L345 618H428L630 44ZM425 253H189L308 585H310L425 253Z" id="g197-12"></path></g><g transform="matrix(.013,0,0,-0.013,20.853,0)"><path d="M275 270C275 450 212 609 64 710L45 686C145 604 203 442 203 270S147 -63 45 -147L64 -170C213 -68 275 89 275 270Z" id="g113-42"></path></g></svg>.</span></div>

Security and Communication Networks

On the Complexity of Impossible Differential Cryptanalysis

Figure 1