Improved Conditional Differential Analysis on NLFSR-Based Block Cipher KATAN32 with MILP

Table 6

Differential characteristic and conditions for .

Round	Difference state	Conditions
0	1100010000100 0000000100000000001
1	1000100001000 0000001000000000010
2	0001000010000 0000010000000000100
3	0010000100000 0000100000000001000
4	0100001000000 0001000000000010000
5	1000010000000 0010000000000100000
6	0000100000000 0100000000001000000	Condition (12)
7	0001000000000 1000000000010000000
8	0010000000000 0000000000100000000	Condition (13)
9	0100000000000 0000000001000000000
10	1000000000000 0000000010000000000
11	0000000000000 0000000100000000001
12	0000000000000 0000001000000000010	Condition (14)
13	0000000000000 0000010000000000100
14	0000000000000 0000100000000001000	Condition (15)
15	0000000000000 0001000000000010000
16	0000000000000 0010000000000100000
17	0000000000000 0100000000001000000
18	0000000000000 1000000000010000000
19	0000000000000 0000000000100000000
20	0000000000000000000001000000000
21	000000000000 0000000010000000000	Condition (16)
22	000000000000 0000000100000000000
23	000000000000 0000001000000000000	Condition (17)
24	000000000000 0000010000000000000

The bold bits denote the update bits. The bold italic bits denote the bits that generate the update bits. The differential probability of the bit is .