Automatic Search for the Linear (Hull) Characteristics of ARX Ciphers: Applied to SPECK, SPARX, Chaskey, and CHAM-64

Table 10

35-round optimal linear trail for CHAM-64.

r			r
1	0000000000018000	0	19	0007010380C08000	1
2	0000000180000000	0	20	810080C080000700	2
3	0001800000000000	0	21	0001800007000201	0
4	0000000000000100	0	22	0000070002010100	0
5	0000000001000000	0	23	0700020101000000	2
6	0000010000000000	0	24	0001010000000006	0
7	0100000000000000	1	25	0000000000060002	0
8	00C0000000000001	1	26	0000000600020000	0
9	8000000000010100	1	27	0006000200000000	1
10	40000001010000C0	1	28	0000000000000400	0
11	0061010000C08000	1	29	0000000004000000	0
12	812000C080004100	4	30	0000040000000000	0
13	0041800041008201	1	31	0400000000000000	1
14	0030410082014100	3	32	0200000000000006	1
15	6500820141000060	3	33	0002000000060600	1
16	A0C1410000600047	3	34	0001000606000200	0
17	C080006000470103	2	35	0106060002000002	2
18	60000047010380C0	1	36	0682020000028401	—