Take the 2-minute tour ×
Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. It's 100% free, no registration required.

I'm trying to verify the claim of paper Improved Algebraic Fault Analysis: A Case Study on Piccolo and with Applications to other Lightweight Block Ciphers about the numbers of equations in algebraic normal form that in one round of the Piccolo cipher. According to method in Section 4.2 is there 928 equations, but I can't understand ... I get verify only the 544 variables numbers but not the numbers of equations

I'm trying: For each S-box is there 4 equations, then in 16 S-box by round is there 64 equations. For mix columns, using Table 3 I have 12 equations ...

share|improve this question

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.