On the Complexity of Impossible Differential Cryptanalysis

<div>Differential values for <svg height="9.14241pt" id="M253" style="vertical-align:-3.1815pt" version="1.1" viewbox="-0.0498162 -5.96091 15.2828 9.14241" width="15.2828pt" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><g transform="matrix(.013,0,0,-0.013,0,0)"><path d="M545 106L524 126C493 85 467 65 455 65C438 65 427 113 405 238C448 295 498 362 543 439L533 448L478 435C453 386 423 331 398 295H395C370 404 347 448 282 448C169 448 23 309 23 153C23 54 65 -12 128 -12C203 -12 283 70 339 155H341C360 29 380 -12 411 -12C444 -12 491 11 545 106ZM333 204C265 95 210 54 169 54C137 54 113 96 113 171C113 302 191 405 252 405C301 405 318 306 333 204Z" id="g113-223"></path></g><g transform="matrix(.0091,0,0,-0.0091,7.059,3.132)"><path d="M138 535C169 535 191 560 191 589C191 620 168 644 139 644S85 620 85 589C85 560 110 535 138 535ZM257 0V30C192 35 185 43 185 109V453C142 435 94 422 40 414V386C101 378 104 372 104 311V109C104 41 97 35 33 30V0H257Z" id="g58-103"></path></g><g transform="matrix(.0091,0,0,-0.0091,9.562,3.132)"><path d="M532 0V30C473 38 467 38 467 107V298C467 395 416 451 336 451C307 451 279 439 251 420C226 404 205 389 185 374V453C142 434 94 422 43 413V386C98 378 104 373 104 309V107C104 41 100 38 31 30V0H251V30C191 35 185 40 185 107V337C216 364 255 389 295 389C360 389 386 347 386 276V110C386 44 380 35 321 30V0H532Z" id="g58-108"></path></g></svg> and <span class="nowrap"><svg height="9.25658pt" id="M254" style="vertical-align:-3.295671pt" version="1.1" viewbox="-0.0498162 -5.96091 20.0051 9.25658" width="20.0051pt" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><g transform="matrix(.013,0,0,-0.013,0,0)"><path d="M545 106L524 126C493 85 467 65 455 65C438 65 427 113 405 238C448 295 498 362 543 439L533 448L478 435C453 386 423 331 398 295H395C370 404 347 448 282 448C169 448 23 309 23 153C23 54 65 -12 128 -12C203 -12 283 70 339 155H341C360 29 380 -12 411 -12C444 -12 491 11 545 106ZM333 204C265 95 210 54 169 54C137 54 113 96 113 171C113 302 191 405 252 405C301 405 318 306 333 204Z" id="g113-223"></path></g><g transform="matrix(.0091,0,0,-0.0091,7.059,3.132)"><path d="M262 451C169 451 38 375 38 210C38 98 121 -12 261 -12C360 -12 481 64 481 227C481 351 386 451 262 451ZM249 414C337 414 385 320 385 204C385 70 333 25 272 25C189 25 134 117 134 241C134 355 189 414 249 414Z" id="g58-109"></path></g><g transform="matrix(.0091,0,0,-0.0091,11.681,3.132)"><path d="M527 54L498 55C459 56 451 63 451 114V445C436 442 413 438 384 435C353 432 318 430 291 429V402L328 396C361 390 370 387 370 331V101C336 70 300 54 262 54C217 54 173 78 173 166V300C173 361 173 412 176 445C160 442 132 438 105 434C77 431 52 430 29 429V402L59 395C83 390 92 385 92 331V141C92 30 150 -12 218 -12C246 -12 266 -4 295 13C324 29 346 47 370 64V-6L376 -12C396 -7 421 1 448 8C476 15 504 21 527 24V54Z" id="g58-115"></path></g><g transform="matrix(.0091,0,0,-0.0091,16.495,3.132)"><path d="M303 37L293 66C280 59 256 49 231 49S173 63 173 143V396H281C294 404 298 428 287 439H173V575L158 577L92 509V439H46L17 408L22 396H92V107C92 27 128 -12 192 -12C203 -12 218 -9 237 2L303 37Z" id="g58-114"></path></g></svg>.</span></div>

Security and Communication Networks

tab2

Table 2

Table 2: On the Complexity of Impossible Differential Cryptanalysis 