From: Full-round impossible differential attack on shadow block cipher
Cipher
Attacked rounds (full round)
Data complexity
Time complexity
Memory complexity
Shadow-32
16
\(2^{30}\)
\(2^{48}\)
\(2^{43}\)
Shadow-64
32
\(2^{61}\)
\(2^{96}\)
\(2^{90}\)