3 votes
Accepted

What is the inverse of this variant of the Gimli SP-box?

First, note that (z << 1) ^ ((x ^ (y | ~z)) << 1) can be simplified to the shorter ~(x ^ (y & z)) << 1. ...
Samuel Neves's user avatar
  • 12.5k

Only top scored, non community-wiki answers of a minimum length are eligible