Improved Conditional Differential Analysis on NLFSR-Based Block Cipher KATAN32 with MILP

Table 9

Five key-recovery attack experiments on 81-round KATAN32.

No.	80-bit key	Equivalent key bits with the maximum bias
		1		1	1	1	0
2		1	0	1	0
3		1	0	1	1
4		1	0	1	0
5		0	0	0	0