Extended Differential Cryptanalysis of Kuznyechik

Pantelimon Stanica, Ranit Dutta, Bimal Mandal

We study the input-side relation $F(cx\oplus a)\oplus F(x)=b$ as an extended differential for block-cipher analysis. Because multiplication occurs before the first S-box, fixing th…