Fig. 3From: Full-round impossible differential attack on shadow block cipherAny two consecutive rounds of ShadowBack to article page