Abstract:
We define a class of differential-linear distinguishing attacks on block ciphers and construct the optimal attack (called differential-singular) in this class. We carry out statistical experiments on SmallPresent ciphers with block length $n\in\{8,12,16\}$ and $R\in\{3,\ldots,9\}$ rounds.