Automatic Search for the Linear (Hull) Characteristics of ARX Ciphers: Applied to SPECK, SPARX, Chaskey, and CHAM-64

Table 8

Linear trails for Chaskey.

r	2 rounds with					3 rounds with
	0	2000001, B100001, 1, 1	1	0	0	0	1, 8100001, 201, 303	0	1	0	1
1	0, 1, 0, 0	0	0	0	1	300, 1, 0, 0	5	0	0	0
2	300004, 1000, 10000000, 4	—	—	—	—	0, 10000, 1, 0	0	0	1	1
3						240030, 10008080, 81011000, 240000	—	—	—	—
r	4 rounds with					5 rounds with
	0	0, 800, 90001, 10D0801	0	2	1	0	1, 8100001, 201, 303	0	1	0	1
1	0, 0, 1, 1	0	0	0	0	300, 1, 0, 0	5	0	0	0
2	0, 80, 810000, 0	0	2	3	1	0, 10000, 1, 0	0	0	1	1
3	18001A20, 80880040, 400189, 1A20	5	3	7	5	240030, 10008080, 81011000, 240000	4	4	6	6
4	2D224005, A83F0DA8, 2DA1C86D, 25004107	—	—	—	—	50E73286, 8241A0, 5161469B, 40D436A6	10	12	4	6
5						BAAE7E16, 76224512, 65104022, 3EA61E37	—	—	—	—