enter image description hereI would like to understand the linear approximation of $(x+y) \bmod 2^n$ by linear masking method in the paper refereed ""Improved Linear Distinguis'hers for SNOW 2.0" by Kaisa Nyberg and Johan Wall´en." In Page number 14 to 15, one theory has been given. I am unable to understand the $A_r$ matrix computation. Specially what is $v$ in this matrix. Advance thanks for anyone's kind explanation.

  • 1
    $\begingroup$ please use mathjax and provide proper mathematical details $\endgroup$
    – kodlu
    May 2, 2020 at 23:47


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.