From: Multidimensional linear cryptanalysis with key difference invariant bias for block ciphers
Model | Attack | rounds | Data per key | Time | Memory | Ref. |
---|---|---|---|---|---|---|
RK | Key Diff Inv Bias | 27 | 262.95RKKP | 2119.5 | 261 | |
 | Key Diff Inv Bias | 27 | 262.3RKDKP | 2119.5 | 261 | this paper |
 | Key Diff Inv Bias | 27 | 260.44RKDKP | 2119.5 | 15·261 | this paper |
 | Key Diff Inv Bias | 28 | 261.5RKDKP | 2126.15 | 261 | this paper |
SK | Saturation | 23 | 262.81CP | 2106.14 | 2103 | |
 | Imp.Diff | 24 | 252.21CP | 2115.10 | 2118 | |
 | Meet-in-the-Middle | 25 | 248CP | 2122 | 2125 | |
 | Zero-Correlation | 25 | 262.1KP | 2122.12 | 260 |