Table 7 Partial encryption and decryption on 27-round TWINE-128

1

\( K_{1}^{3}, K_{1}^{5}, K_{2}^{4} \)

N·2^4×9·2·10

\(X_{1}^{2}\left |X_{2}^{0}\right | X_{4}^{4}\left |X_{27}^{6}\right | X_{27}^{13}\left |X_{27}^{11}\right | X_{27}^{2}\left |X_{27}^{9}\right |\)

2⁶⁰·2

\(K_{1}^{7}, K_{1}^{2}, K_{2}^{6}\)

\(X_{27}^{4}\left |X_{27}^{1}\right | X_{27}^{12}\left |X_{27}^{7}\right | X_{27}^{15}\left |X_{27}^{8}\right | X_{27}^{3}\)

\(K_{3}^{5},\left (K_{4}^{1}\right)\)

\(K_{1}^{0}, K_{2}^{0}\)

2

\(K_{3}^{0}\)

2⁶⁰·2³⁶⁺⁴·2

\(X_{4}^{5}\left |X_{4}^{4}\right | X_{27}^{6}\left |X_{27}^{13}\right | X_{27}^{11}\left |X_{27}^{2}\right | X_{27}^{9}\left |X_{27}^{4}\right |\)

2⁵⁶·2

\(X_{27}^{1}\left |X_{27}^{12}\right | X_{27}^{7}\left |X_{27}^{15}\right | X_{27}^{8} | X_{27}^{3}\)

3

\(K_{5}^{2}\)

2⁵⁶·2⁴⁰⁺⁴·2

\(X_{5}^{12}\left |X_{27}^{6}\right | X_{27}^{13}\left |X_{27}^{11}\right | X_{27}^{2}\left |X_{27}^{9}\right | X_{27}^{4}\left |X_{27}^{1}\right |\)

2⁵²·2

\(X_{27}^{12}\left |X_{27}^{7}\right | X_{27}^{15}\left |X_{27}^{8}\right | X_{27}^{3}\)

4

\(K_{27}^{5}\)

2⁵²·2⁴⁴⁺⁴·2

\(X_{5}^{12}\left |X_{27}^{6}\right | X_{27}^{13}\left |X_{27}^{11}\right | X_{26}^{11}\left |X_{27}^{4}\right | X_{27}^{1}\left |X_{27}^{12}\right |\)

2⁴⁸·2

\(X_{27}^{7}\left |X_{27}^{15}\right | X_{27}^{8} | X_{27}^{3}\)

5

\(K_{26}^{7}\)

2⁴⁸·2⁴⁸⁺⁴·2

\(X_{5}^{12}\left |X_{27}^{6}\right | X_{27}^{13}\left |X_{25}^{15}\right | X_{27}^{4}\left |X_{27}^{1}\right | X_{27}^{12}\left |X_{27}^{7}\right |\)

2⁴⁴·2

\(X_{27}^{15}\left |X_{27}^{8}\right | X_{27}^{3}\)

6

\(K_{27}^{3}\)

2⁴⁴·2⁵²⁺⁴·2

\(X_{5}^{12}\left |X_{27}^{6}\right | X_{27}^{13}\left |X_{25}^{15}\right | X_{27}^{4}\left |X_{27}^{1}\right | X_{27}^{12}\left |X_{27}^{7}\right |\)

2⁴⁰·2

\(X_{27}^{15} | X_{26}^{7}\)

7

\(K_{26}^{2}\)

2⁴⁰·2⁵⁶⁺⁴·2

\(X_{5}^{12}\left |X_{27}^{6}\right | X_{27}^{13}\left |X_{25}^{15}\right | X_{25}^{4}\left |X_{27}^{1}\right | X_{27}^{12}\left |X_{27}^{7}\right |\)

2³⁶·2

\(X_{25}^{5}\)

8

\(K_{27}^{2}\)

2³⁶·2⁶⁰⁺⁴·2

\(X_{5}^{12}\left |X_{27}^{6}\right | X_{27}^{13}\left |X_{25}^{15}\right | X_{27}^{4}\left |X_{27}^{1}\right | X_{26}^{5} | X_{25}^{5}\)

2³²·2

9

\(K_{27}^{1}\)

2³²·2⁶⁴⁺⁴·2

\(X_{5}^{12}\left |X_{27}^{6}\right | X_{27}^{13}\left |X_{25}^{15}\right | X_{26}^{3}\left |X_{26}^{5}\right | X_{25}^{5}\)

2²⁸·2

10

\(K_{25}^{0}\)

2²⁸·2⁶⁸⁺⁴·2

\(X_{5}^{12}\left |X_{27}^{6}\right | X_{27}^{13}\left |X_{25}^{15}\right | X_{26}^{3} | X_{24}^{1}\)

2²⁴·2

11

\(K_{27}^{4}\)

2²⁴·2⁷²⁺⁴·2

\(X_{5}^{12}\left |X_{26}^{9}\right | X_{27}^{13}\left |X_{25}^{15}\right | X_{26}^{3} | X_{24}^{1}\)

2²⁴·2

12

\(K_{26}^{3}\)

2²⁴·2⁷⁶⁺⁴·2

\(X_{5}^{12}\left |X_{26}^{9}\right | X_{25}^{15}\left |X_{25}^{7}\right | X_{24}^{1}\)

2²⁰·2

13

\(K_{25}^{6}\)

2²⁰·2⁸⁰⁺⁴·2

\(X_{5}^{12}\left |X_{23}^{8}\right | X_{25}^{7} | X_{24}^{1}\)

2¹⁶·2

14

\(K_{24}^{1}\)

2¹⁶·2⁸⁴⁺⁴·2

\(X_{5}^{12}\left |X_{23}^{8}\right | X_{23}^{3}\)

2¹²·2

15

\(K_{23}^{3}\)

2¹²·2⁸⁸⁺⁴·2

\(X_{5}^{12} | X_{22}^{7}\)

2⁸·2