Orders with One Iterative Characteristic Orders with One Iterative Characteristic

Table 6: The best orders of the S-boxes (p = 2 ?48). 6 Appendix This appendix describes 136 orders of DES S-boxes for which the maximal probability of two-round iterative characteristics is as in DES or smaller. Table 6 describes the orders whose best characteristics have probability 2 ?48 , which is lower than the best characteristic of DES. Table 7 describes the orders whose best characteristics have the same probability as the best characteristic of DES. In both tables, orders which have two characteristics with the same highest probability are listed separately. The italicized digits specify active S-boxes of the best characteristic.