Table 5 Partial encryption and decryption on 24-round LBlock

1

\(K_{24}^{7}\)

N·2⁴·2

\(X_{0}^{0}\left |X_{0}^{14}\right | X_{0}^{5}\left |X_{0}^{9}\right | X_{0}^{6}\left |X_{0}^{1}\right | X_{0}^{8}\left |X_{0}^{4}\right | X_{24}^{13} |\)

2⁶⁰·2

\(X_{22}^{7}\left |X_{24}^{2}\right | X_{24}^{8}\left |X_{24}^{11}\right | X_{24}^{0} | X_{24}^{9}\)

2

\(K_{24}^{0}\)

2⁶⁰·2⁸·2

\(X_{0}^{0}\left |X_{0}^{14}\right | X_{0}^{5}\left |X_{0}^{9}\right | X_{0}^{6}\left |X_{0}^{1}\right | X_{0}^{8}\left |X_{0}^{4}\right | X_{24}^{13} |\)

2⁵⁶·2

\(X_{22}^{7}\left |X_{22}^{4}\right | X_{24}^{11}\left |X_{24}^{0}\right | X_{24}^{9}\)

3

\(K_{23}^{7}[0]\)

2⁵⁶·2⁸⁺¹·2

\(X_{0}^{0}\left |X_{0}^{14}\right | X_{0}^{5}\left |X_{0}^{9}\right | X_{0}^{6}\left |X_{0}^{1}\right | X_{0}^{8}\left |X_{0}^{4}\right | X_{21}^{7} |\)

2⁵²·2

\(X_{22}^{4}\left |X_{24}^{11}\right | X_{24}^{0} | X_{24}^{9}\)

4

\(K_{1}^{4}\)

2⁵²·2⁹⁺⁴·2

\(X_{0}^{0}\left |X_{0}^{14}\right | X_{0}^{5}\left |X_{0}^{9}\right | X_{0}^{6}\left |X_{0}^{1}\right | X_{0}^{1}\left |X_{1}^{6}\right | X_{21}^{7}\left |X_{22}^{4}\right |\)

2⁴⁸·2

\(X_{24}^{11}\left |X_{24}^{0}\right | X_{24}^{9}\)

5

\(K_{2}^{6}\)

2⁴⁸·2¹³⁺⁴·2

\(X_{0}^{0}\left |X_{0}^{14}\right | X_{0}^{5}\left |X_{0}^{9}\right | X_{0}^{6}\left |X_{2}^{7}\right | X_{21}^{7}\left |X_{22}^{4}\right | X_{24}^{11} |\)

2⁴⁴·2

\(X_{24}^{0} | X_{24}^{9}\)

6

\(K_{1}^{6}\)

2⁴⁴·2¹⁷⁺⁴·2

\(X_{0}^{0}\left |X_{0}^{14}\right | X_{0}^{5}\left |X_{1}^{7}\right | X_{2}^{7}\left |X_{21}^{7}\right | X_{22}^{4}\left |X_{24}^{11}\right |\)

2⁴⁰·2

\(X_{24}^{0} | X_{24}^{9}\)

7

\(K_{1}^{5}\)

2⁴⁰·2²¹⁺⁴·2

\(X_{0}^{0}\left |X_{1}^{4}\right | X_{1}^{7}\left |X_{2}^{7}\right | X_{21}^{7}\left |X_{22}^{4}\right | X_{24}^{11}\left |X_{24}^{0}\right | X_{24}^{9}\)

2³⁶·2

8

\(K_{2}^{4}\)

2³⁶·2²⁵⁺⁴·2

\(X_{3}^{14}\left |X_{1}^{7}\right | X_{2}^{7}\left |X_{21}^{7}\right | X_{22}^{4}\left |X_{24}^{11}\right | X_{24}^{0} | X_{24}^{9}\)

2³²·2

9

\(K_{3}^{7}\)

2³²·2²⁹⁺⁴·2

\(X_{3}^{14}\left |X_{3}^{5}\right | X_{21}^{7}\left |X_{22}^{4}\right | X_{24}^{11}\left |X_{24}^{0}\right | X_{24}^{9}\)

2²⁸·2

10

\(K_{24}^{1}, K_{4}^{5}[1]\)

2²⁸·2³³⁺⁵·4

\(X_{4}^{4}\left |X_{21}^{7}\right | X_{22}^{4}\left |X_{24}^{11}\right | X_{22}^{2}\)

2²⁰·2

11

\(K_{23}^{2}\)

2²⁰·2³⁸⁺⁴·2

\(X_{4}^{4}\left |X_{21}^{7}\right | X_{22}^{4} | X_{21}^{5}\)

2¹⁶·2

12

\(K_{22}^{5}\)

2¹⁶·2⁴²⁺⁴·2

\(X_{4}^{4}\left |X_{21}^{7}\right | X_{20}^{6}\)

2¹²·2

13

\(K_{21}^{6}\)

2¹²·2⁴⁶⁺⁴·2

\(X_{4}^{4} | X_{20}^{9}\)

2⁸·2