Improved Conditional Differential Analysis on NLFSR-Based Block Cipher KATAN32 with MILP

Table 8

Differential characteristic and conditions for .

Round	Difference state	Conditions
0	0001000000000 1000000000010000000
1	0010000000000 0000000000100000000
2	0100000000000 0000000001000000000
3	1000000000000 0000000010000000000
4	0000000000000 0000000100000000001
5	0000000000000 0000001000000000010
6	0000000000000 0000010000000000100
7	0000000000000 0000100000000001000
8	0000000000000 0001000000000010000
9	0000000000000 0010000000000100000
10	0000000000000 0100000000001000000
11	0000000000000 1000000000010000000
12	0000000000000 0000000000100000000	Condition (19)
13	0000000000000 0000000001000000000
14	0000000000000 0000000010000000000	Condition (20)
15	0000000000000 0000000100000000000
16	0000000000000 0000001000000000000	Condition (21)
17	0000000000000 0000010000000000000

The bold bits denote the update bits. The bold italic bits denote the bits that generate the update bits.