Improved Conditional Differential Analysis on NLFSR-Based Block Cipher KATAN32 with MILP

Table 7

Four key-recovery attack experiments on 79-round KATAN32.

No.	80-bit key	Equivalent key bits with the maximum bias
		1		0	1	1	1	0	0	1	0	0	0
2		1	1	1	0	0	0	1	1	0	0
3		0	0	1	1	0	0	0	1	0	0
4		0	0	1	0	1	1	0	0	0	1