Related-Key Multiple Impossible Differential Cryptanalysis on Full-Round LiCi-2 Designed for IoT

Table 5

Length and number of the best distinguishers in single-key setting.

Strategy (difference)	Maximum length	Number
Single-bit	8	544
1-bit input, 2-bit output	9	224
2-bit input, 1-bit output	8	560
2-bit input, 2-bit output	9	16