Table 4 Partial encryption and decryption on 25-round LBlock

1

\(K_{25}^{6}, K_{25}^{7}\)

N·2¹⁸·10

\(x_{1}(x'_{1})=X_{0}^{0}\left |X_{0}^{14}\right | X_{0}^{5}\left |X_{0}^{9}\right | X_{0}^{6}\left |X_{0}^{1}\right | X_{0}^{8} | X_{0}^{4}\)

2⁶⁰·2

\(K_{23}^{2}[2:3]\)

\(X_{25}^{3}\left |X_{25}^{10}\right | X_{25}^{13}\left |X_{23}^{7}\right | X_{25}^{6}\left |X_{25}^{12}\right | X_{21}^{5}\)

\( K_{24}^{1}, K_{25}^{3}\)

2

\(K_{1}^{4}\)

2⁶⁰·2¹⁸⁺⁴·2

\(x_{2}\left (x_{2}^{\prime }\right)=X_{0}^{0}\left |X_{0}^{14}\right | X_{0}^{5}\left |X_{0}^{9}\right | X_{0}^{6}\left |X_{0}^{1}\right | X_{1}^{6} |\)

2⁵⁶·2

\(X_{25}^{3}\left |X_{25}^{10}\right | X_{25}^{13}\left |X_{23}^{7}\right | X_{25}^{6}\left |X_{25}^{12}\right | X_{21}^{5}\)

3

\(K_{2}^{6}\)

2⁵⁶·2²²⁺⁴·2

\(x_{3}\left (x_{3}^{\prime }\right)=X_{0}^{0}\left |X_{0}^{14}\right | X_{0}^{5}\left |X_{0}^{9}\right | X_{0}^{6}\left |X_{2}^{7}\right | X_{25}^{3} |\)

2⁵²·2

\(X_{25}^{10}\left |X_{25}^{13}\right | X_{23}^{7}\left |X_{25}^{6}\right | X_{25}^{12} | X_{21}^{5}\)

4

\(K_{24}^{7} \)

2⁵²·2²⁶⁺³·2

\(x_{4}\left (x_{4}^{\prime }\right)=X_{0}^{0}\left |X_{0}^{14}\right | X_{0}^{5}\left |X_{0}^{9}\right | X_{0}^{6}\left |X_{2}^{7}\right | X_{25}^{3} |\)

2⁴⁸·2

2³ possible values

\(X_{25}^{10}\left |X_{22}^{7}\right | X_{25}^{6}\left |X_{25}^{12}\right | X_{21}^{5}\)

5

\(K_{1}^{6}\)

2⁴⁸·2²⁹⁺⁴·2

\(x_{5}\left (x_{5}^{\prime }\right)=X_{0}^{0}\left |X_{0}^{14}\right | X_{0}^{5}\left |X_{1}^{7}\right | X_{2}^{7}\left |X_{25}^{3}\right | X_{25}^{10} |\)

2⁴⁴·2

\(X_{22}^{7}\left |X_{25}^{6}\right | X_{25}^{12} | X_{21}^{5}\)

6

\(K_{3}^{7}\)

2⁴⁴·2³³⁺¹·2

\(x_{6}\left (x_{6}^{\prime }\right)=X_{0}^{0}\left |X_{0}^{14}\right | X_{0}^{5}\left |X_{3}^{5}\right | X_{25}^{3}\left |X_{25}^{10}\right | X_{22}^{7} |\)

2⁴⁰·2

2 possible values

\(X_{25}^{6}\left |X_{25}^{12}\right | X_{21}^{5}\)

7

\(K_{25}^{4}\)

2⁴⁰·2³⁴⁺⁴·2

\(x_{7}\left (x_{7}^{\prime }\right)=X_{0}^{0}\left |X_{0}^{14}\right | X_{0}^{5}\left |X_{3}^{5}\right | X_{25}^{3}\left |X_{25}^{10}\right | X_{22}^{7} |\)

2³⁶·2

\(X_{23}^{0} | X_{21}^{5}\)

8

\(K_{24}^{0}\left (K_{22}^{5}\right)\)

2³⁶·2³⁸⁺⁴·4

\(x_{8}\left (x_{8}^{\prime }\right)=X_{0}^{0}\left |X_{0}^{14}\right | X_{0}^{5}\left |X_{3}^{5}\right | X_{25}^{3}\left |X_{25}^{10}\right | X_{22}^{7} |\)

2³²·2

\(X_{20}^{6}\)

9

\(K_{25}^{2}\)

2³²·2⁴²⁺³·2

\(x_{9}\left (x_{9}^{\prime }\right)=X_{0}^{0}\left |X_{0}^{14}\right | X_{0}^{5}\left |X_{3}^{5}\right | X_{23}^{5}\left |X_{22}^{7}\right | X_{20}^{6}\)

2²⁸·2

2³ possible values

10

\(K_{23}^{7}[0]\)

2²⁸·2⁴⁵⁺¹·2

\(x_{10}\left (x_{10}^{\prime }\right)=X_{0}^{0}\left |X_{0}^{14}\right | X_{0}^{5}\left |X_{3}^{5}\right | X_{21}^{7} | X_{20}^{6}\)

2²⁴·2

11

\(K_{1}^{5}\)

2²⁴·2⁴⁶⁺⁴·2

\(x_{11}\left (x_{11}^{\prime }\right)=X_{0}^{0}\left |X_{1}^{4}\right | X_{3}^{5}\left |X_{21}^{7}\right | X_{20}^{6}\)

2²⁰·2

12

\(K_{2}^{4}\)

2²⁰·2⁵⁰⁺⁴·2

\(x_{12}\left (x_{12}^{\prime }\right)=X_{3}^{14}\left |X_{3}^{5}\right | X_{21}^{7} | X_{20}^{6}\)

2¹⁶·2

13

\(K_{4}^{5}[1]\)

2¹⁶·2⁵⁴⁺¹·2

\(x_{13}\left (x_{13}^{\prime }\right)=X_{4}^{4}\left |X_{21}^{7}\right | X_{20}^{6}\)

2¹²·2

14

\(K_{21}^{6}\)

2¹²·2⁵⁵⁺⁴·2

\(x_{14}\left (x_{14}^{\prime }\right)=X_{4}^{4} | X_{20}^{9}\)

2⁸·2