igneum-network/igneum
1
0
Fork 0
Code Issues Pull requests Releases Activity

adv-mixer-3 report: Q2b k=1..8 (margin 1 of 8 on the round-0 input), Q3 both days, Q1 k=4 and day 20733, Q4 k=5..6, log copies

Browse source 
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
This commit is contained in:
igneum-labs 2026-10-07 18:55:14 +00:00
parent b97539c0d1
commit 05b5ac0ebf
64 changed files with 3710 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

27
docs/analysis/cryptanalysis/logs/adv-mixer-3/01-adv-mixer-3-index-20729.log Normal file
View file

@ -0,0 +1,27 @@
start igneum-build-1 2026-10-07T18:42:05Z bdd8432f6181bcc9e77885cf840c83e2a6ffe5ae027182a1d9181710bbb06e70 /srv/builds/_adv-mixer-3/bin/adv-mixer-3
== index day 20729 k=0 2026-10-07T18:42:05Z
rc=0
chi2=18014394214514688.0 df=4194303 z=6219776281047.55 empty=4194303 min=0 max=4294967296 argmax=0xb3e14
segments(2^16): chi2=281470681743360.0 z=777466196148.62 lines-in-segment(64): chi2=270582939648.0 z=24105444157.93
verdict: NON-UNIFORM
== index day 20729 k=1 2026-10-07T18:42:37Z
rc=0
chi2=4191025.3 df=4194303 z=-1.13 empty=0 min=871 max=1191 argmax=0x59808
segments(2^16): chi2=64812.7 z=-2.00 lines-in-segment(64): chi2=60.1 z=-0.26
verdict: uniform within the band
== index day 20729 k=2 2026-10-07T18:45:13Z
rc=0
chi2=4192336.5 df=4194303 z=-0.68 empty=0 min=874 max=1191 argmax=0x136878
segments(2^16): chi2=65738.0 z=0.56 lines-in-segment(64): chi2=61.4 z=-0.14
verdict: uniform within the band
== index day 20729 k=3 2026-10-07T18:47:14Z
rc=0
chi2=4193186.3 df=4194303 z=-0.39 empty=0 min=853 max=1187 argmax=0x1ce18c
segments(2^16): chi2=65522.6 z=-0.03 lines-in-segment(64): chi2=50.1 z=-1.15
verdict: uniform within the band
== index day 20729 k=4 2026-10-07T18:48:32Z
rc=0
chi2=4192938.9 df=4194303 z=-0.47 empty=0 min=857 max=1190 argmax=0x5aee9
segments(2^16): chi2=65923.7 z=1.07 lines-in-segment(64): chi2=60.2 z=-0.25
verdict: uniform within the band
== index day 20729 k=5 2026-10-07T18:51:35Z

12
docs/analysis/cryptanalysis/logs/adv-mixer-3/02-adv-mixer-3-index-20733.log Normal file
View file

@ -0,0 +1,12 @@
start igneum-build-2 2026-10-07T18:46:54Z bdd8432f6181bcc9e77885cf840c83e2a6ffe5ae027182a1d9181710bbb06e70 /srv/builds/_adv-mixer-3/bin/adv-mixer-3
== index day 20733 k=0 2026-10-07T18:46:54Z
rc=0
chi2=18014394214514688.0 df=4194303 z=6219776281047.55 empty=4194303 min=0 max=4294967296 argmax=0x3f9008
segments(2^16): chi2=281470681743360.0 z=777466196148.62 lines-in-segment(64): chi2=270582939648.0 z=24105444157.93
verdict: NON-UNIFORM
== index day 20733 k=1 2026-10-07T18:47:23Z
rc=0
chi2=4192241.1 df=4194303 z=-0.71 empty=0 min=863 max=1202 argmax=0x35b3a5
segments(2^16): chi2=65576.5 z=0.11 lines-in-segment(64): chi2=56.2 z=-0.60
verdict: uniform within the band
== index day 20733 k=2 2026-10-07T18:50:56Z

13
docs/analysis/cryptanalysis/logs/adv-mixer-3/03-adv-mixer-3-sac-20729.log Normal file
View file

@ -0,0 +1,13 @@
start igneum-build-1 2026-10-07T18:42:05Z bdd8432f6181bcc9e77885cf840c83e2a6ffe5ae027182a1d9181710bbb06e70 /srv/builds/_adv-mixer-3/bin/adv-mixer-3
== sac plant weak k=8
holes=0 beyond6=0 beyond8=0 mean_flip=0.50000 worst in=262 (word 8) out=356 (word 11) p=0.50952 z=4.88
verdict: no cell beyond 6 sigma
== sac plant one k=8
holes=1959 beyond6=89129 beyond8=83086 mean_flip=0.46118 worst in=23 (word 0) out=35 (word 1) p=1.00000 z=256.00
verdict: DISTINGUISHED
== sac day 20729 k=1 states 2^24 2026-10-07T18:42:13Z
rc=0
holes=354 beyond6=129726 beyond8=126336 mean_flip=0.46118 worst in=279 (word 8) out=64 (word 2) p=1.00000 z=4096.00
line index cells (out bits 0..21): worst z=4096.00 beyond6=7930 of 11264
verdict: DISTINGUISHED
== sac day 20729 k=2 states 2^24 2026-10-07T18:48:32Z

8
docs/analysis/cryptanalysis/logs/adv-mixer-3/04-adv-mixer-3-sac-20733.log Normal file
View file

@ -0,0 +1,8 @@
start igneum-build-2 2026-10-07T18:46:54Z bdd8432f6181bcc9e77885cf840c83e2a6ffe5ae027182a1d9181710bbb06e70 /srv/builds/_adv-mixer-3/bin/adv-mixer-3
== sac plant weak k=8
holes=0 beyond6=0 beyond8=0 mean_flip=0.50000 worst in=464 (word 14) out=167 (word 5) p=0.49042 z=-4.91
verdict: no cell beyond 6 sigma
== sac plant one k=8
holes=1714 beyond6=91827 beyond8=86575 mean_flip=0.45695 worst in=25 (word 0) out=0 (word 0) p=1.00000 z=256.00
verdict: DISTINGUISHED
== sac day 20733 k=1 states 2^24 2026-10-07T18:47:02Z

88
docs/analysis/cryptanalysis/logs/adv-mixer-3/05-adv-mixer-3-difflinrx-20729.log Normal file
View file

@ -0,0 +1,88 @@
start igneum-build-1 2026-10-07T18:42:05Z bdd8432f6181bcc9e77885cf840c83e2a6ffe5ae027182a1d9181710bbb06e70 /srv/builds/_adv-mixer-3/bin/adv-mixer-3
== diff plant nomul k=1
max multiplicity of one output difference: 1 (input difference #0, p about 1.53e-5); a random map gives 1 or 2
deterministic output bits: total 7992 over all differences, max per difference 51 of 512
verdict: DISTINGUISHED
== diff day 20729 k=1 2026-10-07T18:42:07Z
rc=0
max multiplicity of one output difference: 1 (input difference #0, p about 9.54e-7); a random map gives 1 or 2
deterministic output bits: total 695 over all differences, max per difference 35 of 512
zero output words: max in any pair 0 of 16, mean per pair 0.000000 (random: 0.000000)
verdict: DISTINGUISHED
== diff day 20729 k=2 2026-10-07T18:42:27Z
rc=0
max multiplicity of one output difference: 1 (input difference #0, p about 9.54e-7); a random map gives 1 or 2
deterministic output bits: total 0 over all differences, max per difference 0 of 512
zero output words: max in any pair 1 of 16, mean per pair 0.000000 (random: 0.000000)
verdict: no differential above the band
== diff day 20729 k=3 2026-10-07T18:42:59Z
rc=0
max multiplicity of one output difference: 1 (input difference #0, p about 9.54e-7); a random map gives 1 or 2
deterministic output bits: total 0 over all differences, max per difference 0 of 512
zero output words: max in any pair 1 of 16, mean per pair 0.000000 (random: 0.000000)
verdict: no differential above the band
== diff day 20729 k=4 2026-10-07T18:43:41Z
rc=0
max multiplicity of one output difference: 1 (input difference #0, p about 9.54e-7); a random map gives 1 or 2
deterministic output bits: total 0 over all differences, max per difference 0 of 512
zero output words: max in any pair 1 of 16, mean per pair 0.000000 (random: 0.000000)
verdict: no differential above the band
== diff day 20729 k=5 2026-10-07T18:44:22Z
rc=0
max multiplicity of one output difference: 1 (input difference #0, p about 9.54e-7); a random map gives 1 or 2
deterministic output bits: total 0 over all differences, max per difference 0 of 512
zero output words: max in any pair 1 of 16, mean per pair 0.000000 (random: 0.000000)
verdict: no differential above the band
== diff day 20729 k=6 2026-10-07T18:44:57Z
rc=0
max multiplicity of one output difference: 1 (input difference #0, p about 9.54e-7); a random map gives 1 or 2
deterministic output bits: total 0 over all differences, max per difference 0 of 512
zero output words: max in any pair 1 of 16, mean per pair 0.000000 (random: 0.000000)
verdict: no differential above the band
== diff day 20729 k=7 2026-10-07T18:46:06Z
rc=0
max multiplicity of one output difference: 1 (input difference #0, p about 9.54e-7); a random map gives 1 or 2
deterministic output bits: total 0 over all differences, max per difference 0 of 512
zero output words: max in any pair 1 of 16, mean per pair 0.000000 (random: 0.000000)
verdict: no differential above the band
== diff day 20729 k=8 2026-10-07T18:46:42Z
rc=0
max multiplicity of one output difference: 1 (input difference #0, p about 9.54e-7); a random map gives 1 or 2
deterministic output bits: total 0 over all differences, max per difference 0 of 512
zero output words: max in any pair 1 of 16, mean per pair 0.000000 (random: 0.000000)
verdict: no differential above the band
== lin identity plant k=0
worst correlation in=0 out=0 (word 0) c=1.00000 z=1024.00; cells beyond6=512 beyond8=512 of 262144
line index cells (out bits 0..21): worst z=1024.00 beyond6=22; output bit balance worst z=3.20
verdict: DISTINGUISHED
== lin day 20729 k=1 2026-10-07T18:47:06Z
rc=0
worst correlation in=92 out=396 (word 12) c=-0.00056 z=-4.61; cells beyond6=0 beyond8=0 of 262144
line index cells (out bits 0..21): worst z=-3.72 beyond6=0; output bit balance worst z=3.82
verdict: no correlation beyond 6 sigma
== lin day 20729 k=2 2026-10-07T18:47:44Z
rc=0
worst correlation in=217 out=54 (word 1) c=0.00058 z=4.73; cells beyond6=0 beyond8=0 of 262144
line index cells (out bits 0..21): worst z=4.09 beyond6=0; output bit balance worst z=3.47
verdict: no correlation beyond 6 sigma
== lin day 20729 k=3 2026-10-07T18:48:18Z
rc=0
worst correlation in=284 out=214 (word 6) c=0.00056 z=4.61; cells beyond6=0 beyond8=0 of 262144
line index cells (out bits 0..21): worst z=-3.95 beyond6=0; output bit balance worst z=3.17
verdict: no correlation beyond 6 sigma
== lin day 20729 k=4 2026-10-07T18:48:59Z
rc=0
worst correlation in=71 out=178 (word 5) c=-0.00056 z=-4.61; cells beyond6=0 beyond8=0 of 262144
line index cells (out bits 0..21): worst z=4.18 beyond6=0; output bit balance worst z=3.08
verdict: no correlation beyond 6 sigma
== lin day 20729 k=5 2026-10-07T18:49:56Z
rc=0
worst correlation in=190 out=458 (word 14) c=0.00057 z=4.64; cells beyond6=0 beyond8=0 of 262144
line index cells (out bits 0..21): worst z=4.14 beyond6=0; output bit balance worst z=3.27
verdict: no correlation beyond 6 sigma
== lin day 20729 k=6 2026-10-07T18:51:37Z
rc=0
worst correlation in=473 out=328 (word 10) c=-0.00055 z=-4.54; cells beyond6=0 beyond8=0 of 262144
line index cells (out bits 0..21): worst z=4.21 beyond6=0; output bit balance worst z=2.98
verdict: no correlation beyond 6 sigma
== lin day 20729 k=7 2026-10-07T18:53:25Z

48
docs/analysis/cryptanalysis/logs/adv-mixer-3/06-adv-mixer-3-difflinrx-20733.log Normal file
View file

@ -0,0 +1,48 @@
start igneum-build-2 2026-10-07T18:46:54Z bdd8432f6181bcc9e77885cf840c83e2a6ffe5ae027182a1d9181710bbb06e70 /srv/builds/_adv-mixer-3/bin/adv-mixer-3
== diff plant nomul k=1
max multiplicity of one output difference: 1 (input difference #0, p about 1.53e-5); a random map gives 1 or 2
deterministic output bits: total 7189 over all differences, max per difference 75 of 512
verdict: DISTINGUISHED
== diff day 20733 k=1 2026-10-07T18:46:55Z
rc=0
max multiplicity of one output difference: 1 (input difference #0, p about 9.54e-7); a random map gives 1 or 2
deterministic output bits: total 537 over all differences, max per difference 40 of 512
zero output words: max in any pair 4 of 16, mean per pair 0.000000 (random: 0.000000)
verdict: DISTINGUISHED
== diff day 20733 k=2 2026-10-07T18:47:16Z
rc=0
max multiplicity of one output difference: 1 (input difference #0, p about 9.54e-7); a random map gives 1 or 2
deterministic output bits: total 0 over all differences, max per difference 0 of 512
zero output words: max in any pair 1 of 16, mean per pair 0.000000 (random: 0.000000)
verdict: no differential above the band
== diff day 20733 k=3 2026-10-07T18:47:47Z
rc=0
max multiplicity of one output difference: 1 (input difference #0, p about 9.54e-7); a random map gives 1 or 2
deterministic output bits: total 0 over all differences, max per difference 0 of 512
zero output words: max in any pair 1 of 16, mean per pair 0.000000 (random: 0.000000)
verdict: no differential above the band
== diff day 20733 k=4 2026-10-07T18:48:22Z
rc=0
max multiplicity of one output difference: 1 (input difference #0, p about 9.54e-7); a random map gives 1 or 2
deterministic output bits: total 0 over all differences, max per difference 0 of 512
zero output words: max in any pair 1 of 16, mean per pair 0.000000 (random: 0.000000)
verdict: no differential above the band
== diff day 20733 k=5 2026-10-07T18:49:05Z
rc=0
max multiplicity of one output difference: 1 (input difference #0, p about 9.54e-7); a random map gives 1 or 2
deterministic output bits: total 0 over all differences, max per difference 0 of 512
zero output words: max in any pair 1 of 16, mean per pair 0.000000 (random: 0.000000)
verdict: no differential above the band
== diff day 20733 k=6 2026-10-07T18:50:04Z
rc=0
max multiplicity of one output difference: 1 (input difference #0, p about 9.54e-7); a random map gives 1 or 2
deterministic output bits: total 0 over all differences, max per difference 0 of 512
zero output words: max in any pair 1 of 16, mean per pair 0.000000 (random: 0.000000)
verdict: no differential above the band
== diff day 20733 k=7 2026-10-07T18:51:12Z
rc=0
max multiplicity of one output difference: 1 (input difference #0, p about 9.54e-7); a random map gives 1 or 2
deterministic output bits: total 0 over all differences, max per difference 0 of 512
zero output words: max in any pair 1 of 16, mean per pair 0.000000 (random: 0.000000)
verdict: no differential above the band
== diff day 20733 k=8 2026-10-07T18:53:14Z

4
docs/analysis/cryptanalysis/logs/adv-mixer-3/08-adv-mixer-3-sat.log Normal file
View file

@ -0,0 +1,4 @@
start igneum-build-2 2026-10-07T18:46:54Z bdd8432f6181bcc9e77885cf840c83e2a6ffe5ae027182a1d9181710bbb06e70 /srv/builds/_adv-mixer-3/bin/adv-mixer-3
== cnf day 20729 k=1 2026-10-07T18:46:54Z
t0=0x12345678 target index (low 22 bits of s[0]) = 0x20eb79
cnf: vars=33873 clauses=112328 written to /srv/builds/_adv-mixer-3/cnf/d20729-k1.cnf

45
docs/analysis/cryptanalysis/logs/adv-mixer-3/09-adv-mixer-3-sac0.log Normal file
View file

@ -0,0 +1,45 @@
start igneum-build-1 2026-10-07T18:49:48Z 8153dbafa4540c796ae5a76e31258dbb1323724465aa4709d9cecd050dea5c40 /srv/builds/_adv-mixer-3/bin/adv-mixer-3-v2
== sac0 plant k=0 (the init alone) day 20729
holes=12439 beyond6=16132 mean_flip=0.13893 worst t-bit=0 out=0 (word 0) p=0.00000 z=-256.00
verdict: DISTINGUISHED
== sac0 day 20729 k=1 states 2^24 2026-10-07T18:49:48Z
rc=0
holes=0 beyond6=218 mean_flip=0.49998 worst t-bit=31 out=53 (word 1) p=0.74269 z=1988.08
line index cells (out bits 0..21): worst z=1898.28 beyond6=18 of 704
verdict: DISTINGUISHED
== sac0 day 20729 k=2 states 2^24 2026-10-07T18:50:05Z
rc=0
holes=0 beyond6=0 mean_flip=0.50000 worst t-bit=23 out=147 (word 4) p=0.49949 z=-4.19
line index cells (out bits 0..21): worst z=-3.25 beyond6=0 of 704
verdict: no cell beyond 6 sigma
== sac0 day 20729 k=3 states 2^24 2026-10-07T18:50:24Z
rc=0
holes=0 beyond6=0 mean_flip=0.50000 worst t-bit=26 out=219 (word 6) p=0.49955 z=-3.73
line index cells (out bits 0..21): worst z=3.11 beyond6=0 of 704
verdict: no cell beyond 6 sigma
== sac0 day 20729 k=4 states 2^24 2026-10-07T18:50:48Z
rc=0
holes=0 beyond6=0 mean_flip=0.50000 worst t-bit=30 out=329 (word 10) p=0.50051 z=4.15
line index cells (out bits 0..21): worst z=-3.72 beyond6=0 of 704
verdict: no cell beyond 6 sigma
== sac0 day 20729 k=5 states 2^24 2026-10-07T18:51:21Z
rc=0
holes=0 beyond6=0 mean_flip=0.50000 worst t-bit=31 out=162 (word 5) p=0.49947 z=-4.32
line index cells (out bits 0..21): worst z=3.79 beyond6=0 of 704
verdict: no cell beyond 6 sigma
== sac0 day 20729 k=6 states 2^24 2026-10-07T18:51:52Z
rc=0
holes=0 beyond6=0 mean_flip=0.50000 worst t-bit=26 out=194 (word 6) p=0.50050 z=4.08
line index cells (out bits 0..21): worst z=3.32 beyond6=0 of 704
verdict: no cell beyond 6 sigma
== sac0 day 20729 k=7 states 2^24 2026-10-07T18:52:14Z
rc=0
holes=0 beyond6=0 mean_flip=0.50000 worst t-bit=6 out=390 (word 12) p=0.49943 z=-4.69
line index cells (out bits 0..21): worst z=4.24 beyond6=0 of 704
verdict: no cell beyond 6 sigma
== sac0 day 20729 k=8 states 2^24 2026-10-07T18:52:35Z
rc=0
holes=0 beyond6=0 mean_flip=0.50000 worst t-bit=13 out=9 (word 0) p=0.49947 z=-4.33
line index cells (out bits 0..21): worst z=-4.33 beyond6=0 of 704
verdict: no cell beyond 6 sigma
== sac0 day 20729 k=2 states 2^28 2026-10-07T18:53:02Z

9
docs/analysis/cryptanalysis/logs/adv-mixer-3/cnf-20729-k1.log Normal file
View file

@ -0,0 +1,9 @@
adv-mixer-3 cnf day=20729 apps=1 start=0 plant=None unix=1791398814
key = 528b3e14 2e689968 ffc58df7 b7f348cb 8c15a789 703473e8 e58713af 0cfe196a
rot = [6, 25, 5, 25, 29, 11, 9, 21]
mul = addda577 e83ff665 a15aee9f 31ffb8cb e72c824d 225e647b 3ec0ace3 d1eb11d5 fa5c7dc5 40128acf 70bc55cf b823fa39 07fcdf49 56a6c8b1 c05d3115 02063ddd
rc = 0655b978 2c53cb31 e14235d3 30d45c30 5b07a13b 25271fad 418b165b f7fe03d7 67943b1d 5ba337a2 24aa3983 6abbbed4 12488b47 a4a81e53 96f96da0 b86823f8
keys = 9e3779b9
t0=0x12345678 target index (low 22 bits of s[0]) = 0x20eb79
cnf: vars=33873 clauses=112328 written to /srv/builds/_adv-mixer-3/cnf/d20729-k1.cnf
verify a model with: adv-mixer-3 verify --day 20729 --apps 1 --start 0 --plant none --t <t from variables 1..32>

11
docs/analysis/cryptanalysis/logs/adv-mixer-3/diff-20729-k1.log Normal file
View file

@ -0,0 +1,11 @@
adv-mixer-3 diff day=20729 apps=1 start=8 plant=None unix=1791398527
key = 528b3e14 2e689968 ffc58df7 b7f348cb 8c15a789 703473e8 e58713af 0cfe196a
rot = [6, 25, 5, 25, 29, 11, 9, 21]
mul = addda577 e83ff665 a15aee9f 31ffb8cb e72c824d 225e647b 3ec0ace3 d1eb11d5 fa5c7dc5 40128acf 70bc55cf b823fa39 07fcdf49 56a6c8b1 c05d3115 02063ddd
rc = 0655b978 2c53cb31 e14235d3 30d45c30 5b07a13b 25271fad 418b165b f7fe03d7 67943b1d 5ba337a2 24aa3983 6abbbed4 12488b47 a4a81e53 96f96da0 b86823f8
keys = 8ff34781
diff: samples=1048576 per difference, 576 differences, wall=20.2s band=2^-20.0
max multiplicity of one output difference: 1 (input difference #0, p about 9.54e-7); a random map gives 1 or 2
deterministic output bits: total 695 over all differences, max per difference 35 of 512
zero output words: max in any pair 0 of 16, mean per pair 0.000000 (random: 0.000000)
verdict: DISTINGUISHED

11
docs/analysis/cryptanalysis/logs/adv-mixer-3/diff-20729-k2.log Normal file
View file

@ -0,0 +1,11 @@
adv-mixer-3 diff day=20729 apps=2 start=8 plant=None unix=1791398547
key = 528b3e14 2e689968 ffc58df7 b7f348cb 8c15a789 703473e8 e58713af 0cfe196a
rot = [6, 25, 5, 25, 29, 11, 9, 21]
mul = addda577 e83ff665 a15aee9f 31ffb8cb e72c824d 225e647b 3ec0ace3 d1eb11d5 fa5c7dc5 40128acf 70bc55cf b823fa39 07fcdf49 56a6c8b1 c05d3115 02063ddd
rc = 0655b978 2c53cb31 e14235d3 30d45c30 5b07a13b 25271fad 418b165b f7fe03d7 67943b1d 5ba337a2 24aa3983 6abbbed4 12488b47 a4a81e53 96f96da0 b86823f8
keys = 8ff34781 2e2ac13a
diff: samples=1048576 per difference, 576 differences, wall=31.4s band=2^-20.0
max multiplicity of one output difference: 1 (input difference #0, p about 9.54e-7); a random map gives 1 or 2
deterministic output bits: total 0 over all differences, max per difference 0 of 512
zero output words: max in any pair 1 of 16, mean per pair 0.000000 (random: 0.000000)
verdict: no differential above the band

11
docs/analysis/cryptanalysis/logs/adv-mixer-3/diff-20729-k3.log Normal file
View file

@ -0,0 +1,11 @@
adv-mixer-3 diff day=20729 apps=3 start=8 plant=None unix=1791398579
key = 528b3e14 2e689968 ffc58df7 b7f348cb 8c15a789 703473e8 e58713af 0cfe196a
rot = [6, 25, 5, 25, 29, 11, 9, 21]
mul = addda577 e83ff665 a15aee9f 31ffb8cb e72c824d 225e647b 3ec0ace3 d1eb11d5 fa5c7dc5 40128acf 70bc55cf b823fa39 07fcdf49 56a6c8b1 c05d3115 02063ddd
rc = 0655b978 2c53cb31 e14235d3 30d45c30 5b07a13b 25271fad 418b165b f7fe03d7 67943b1d 5ba337a2 24aa3983 6abbbed4 12488b47 a4a81e53 96f96da0 b86823f8
keys = 8ff34781 2e2ac13a cc623af3
diff: samples=1048576 per difference, 576 differences, wall=42.2s band=2^-20.0
max multiplicity of one output difference: 1 (input difference #0, p about 9.54e-7); a random map gives 1 or 2
deterministic output bits: total 0 over all differences, max per difference 0 of 512
zero output words: max in any pair 1 of 16, mean per pair 0.000000 (random: 0.000000)
verdict: no differential above the band

11
docs/analysis/cryptanalysis/logs/adv-mixer-3/diff-20729-k4.log Normal file
View file

@ -0,0 +1,11 @@
adv-mixer-3 diff day=20729 apps=4 start=8 plant=None unix=1791398621
key = 528b3e14 2e689968 ffc58df7 b7f348cb 8c15a789 703473e8 e58713af 0cfe196a
rot = [6, 25, 5, 25, 29, 11, 9, 21]
mul = addda577 e83ff665 a15aee9f 31ffb8cb e72c824d 225e647b 3ec0ace3 d1eb11d5 fa5c7dc5 40128acf 70bc55cf b823fa39 07fcdf49 56a6c8b1 c05d3115 02063ddd
rc = 0655b978 2c53cb31 e14235d3 30d45c30 5b07a13b 25271fad 418b165b f7fe03d7 67943b1d 5ba337a2 24aa3983 6abbbed4 12488b47 a4a81e53 96f96da0 b86823f8
keys = 8ff34781 2e2ac13a cc623af3 6a99b4ac
diff: samples=1048576 per difference, 576 differences, wall=40.8s band=2^-20.0
max multiplicity of one output difference: 1 (input difference #0, p about 9.54e-7); a random map gives 1 or 2
deterministic output bits: total 0 over all differences, max per difference 0 of 512
zero output words: max in any pair 1 of 16, mean per pair 0.000000 (random: 0.000000)
verdict: no differential above the band

11
docs/analysis/cryptanalysis/logs/adv-mixer-3/diff-20729-k5.log Normal file
View file

@ -0,0 +1,11 @@
adv-mixer-3 diff day=20729 apps=5 start=8 plant=None unix=1791398662
key = 528b3e14 2e689968 ffc58df7 b7f348cb 8c15a789 703473e8 e58713af 0cfe196a
rot = [6, 25, 5, 25, 29, 11, 9, 21]
mul = addda577 e83ff665 a15aee9f 31ffb8cb e72c824d 225e647b 3ec0ace3 d1eb11d5 fa5c7dc5 40128acf 70bc55cf b823fa39 07fcdf49 56a6c8b1 c05d3115 02063ddd
rc = 0655b978 2c53cb31 e14235d3 30d45c30 5b07a13b 25271fad 418b165b f7fe03d7 67943b1d 5ba337a2 24aa3983 6abbbed4 12488b47 a4a81e53 96f96da0 b86823f8
keys = 8ff34781 2e2ac13a cc623af3 6a99b4ac 08d12e65
diff: samples=1048576 per difference, 576 differences, wall=35.6s band=2^-20.0
max multiplicity of one output difference: 1 (input difference #0, p about 9.54e-7); a random map gives 1 or 2
deterministic output bits: total 0 over all differences, max per difference 0 of 512
zero output words: max in any pair 1 of 16, mean per pair 0.000000 (random: 0.000000)
verdict: no differential above the band

11
docs/analysis/cryptanalysis/logs/adv-mixer-3/diff-20729-k6.log Normal file
View file

@ -0,0 +1,11 @@
adv-mixer-3 diff day=20729 apps=6 start=8 plant=None unix=1791398697
key = 528b3e14 2e689968 ffc58df7 b7f348cb 8c15a789 703473e8 e58713af 0cfe196a
rot = [6, 25, 5, 25, 29, 11, 9, 21]
mul = addda577 e83ff665 a15aee9f 31ffb8cb e72c824d 225e647b 3ec0ace3 d1eb11d5 fa5c7dc5 40128acf 70bc55cf b823fa39 07fcdf49 56a6c8b1 c05d3115 02063ddd
rc = 0655b978 2c53cb31 e14235d3 30d45c30 5b07a13b 25271fad 418b165b f7fe03d7 67943b1d 5ba337a2 24aa3983 6abbbed4 12488b47 a4a81e53 96f96da0 b86823f8
keys = 8ff34781 2e2ac13a cc623af3 6a99b4ac 08d12e65 a708a81e
diff: samples=1048576 per difference, 576 differences, wall=68.6s band=2^-20.0
max multiplicity of one output difference: 1 (input difference #0, p about 9.54e-7); a random map gives 1 or 2
deterministic output bits: total 0 over all differences, max per difference 0 of 512
zero output words: max in any pair 1 of 16, mean per pair 0.000000 (random: 0.000000)
verdict: no differential above the band

11
docs/analysis/cryptanalysis/logs/adv-mixer-3/diff-20729-k7.log Normal file
View file

@ -0,0 +1,11 @@
adv-mixer-3 diff day=20729 apps=7 start=8 plant=None unix=1791398766
key = 528b3e14 2e689968 ffc58df7 b7f348cb 8c15a789 703473e8 e58713af 0cfe196a
rot = [6, 25, 5, 25, 29, 11, 9, 21]
mul = addda577 e83ff665 a15aee9f 31ffb8cb e72c824d 225e647b 3ec0ace3 d1eb11d5 fa5c7dc5 40128acf 70bc55cf b823fa39 07fcdf49 56a6c8b1 c05d3115 02063ddd
rc = 0655b978 2c53cb31 e14235d3 30d45c30 5b07a13b 25271fad 418b165b f7fe03d7 67943b1d 5ba337a2 24aa3983 6abbbed4 12488b47 a4a81e53 96f96da0 b86823f8
keys = 8ff34781 2e2ac13a cc623af3 6a99b4ac 08d12e65 a708a81e 454021d7
diff: samples=1048576 per difference, 576 differences, wall=35.9s band=2^-20.0
max multiplicity of one output difference: 1 (input difference #0, p about 9.54e-7); a random map gives 1 or 2
deterministic output bits: total 0 over all differences, max per difference 0 of 512
zero output words: max in any pair 1 of 16, mean per pair 0.000000 (random: 0.000000)
verdict: no differential above the band

11
docs/analysis/cryptanalysis/logs/adv-mixer-3/diff-20729-k8.log Normal file
View file

@ -0,0 +1,11 @@
adv-mixer-3 diff day=20729 apps=8 start=8 plant=None unix=1791398802
key = 528b3e14 2e689968 ffc58df7 b7f348cb 8c15a789 703473e8 e58713af 0cfe196a
rot = [6, 25, 5, 25, 29, 11, 9, 21]
mul = addda577 e83ff665 a15aee9f 31ffb8cb e72c824d 225e647b 3ec0ace3 d1eb11d5 fa5c7dc5 40128acf 70bc55cf b823fa39 07fcdf49 56a6c8b1 c05d3115 02063ddd
rc = 0655b978 2c53cb31 e14235d3 30d45c30 5b07a13b 25271fad 418b165b f7fe03d7 67943b1d 5ba337a2 24aa3983 6abbbed4 12488b47 a4a81e53 96f96da0 b86823f8
keys = 8ff34781 2e2ac13a cc623af3 6a99b4ac 08d12e65 a708a81e 454021d7 e3779b90
diff: samples=1048576 per difference, 576 differences, wall=23.8s band=2^-20.0
max multiplicity of one output difference: 1 (input difference #0, p about 9.54e-7); a random map gives 1 or 2
deterministic output bits: total 0 over all differences, max per difference 0 of 512
zero output words: max in any pair 1 of 16, mean per pair 0.000000 (random: 0.000000)
verdict: no differential above the band

11
docs/analysis/cryptanalysis/logs/adv-mixer-3/diff-20729-nomul-k1.log Normal file
View file

@ -0,0 +1,11 @@
adv-mixer-3 diff day=20729 apps=1 start=8 plant=NoMul unix=1791398525
key = 528b3e14 2e689968 ffc58df7 b7f348cb 8c15a789 703473e8 e58713af 0cfe196a
rot = [6, 25, 5, 25, 29, 11, 9, 21]
mul = 00000001 00000001 00000001 00000001 00000001 00000001 00000001 00000001 00000001 00000001 00000001 00000001 00000001 00000001 00000001 00000001
rc = 0655b978 2c53cb31 e14235d3 30d45c30 5b07a13b 25271fad 418b165b f7fe03d7 67943b1d 5ba337a2 24aa3983 6abbbed4 12488b47 a4a81e53 96f96da0 b86823f8
keys = 8ff34781
diff: samples=65536 per difference, 576 differences, wall=1.6s band=2^-16.0
max multiplicity of one output difference: 1 (input difference #0, p about 1.53e-5); a random map gives 1 or 2
deterministic output bits: total 7992 over all differences, max per difference 51 of 512
zero output words: max in any pair 1 of 16, mean per pair 0.000000 (random: 0.000000)
verdict: DISTINGUISHED

11
docs/analysis/cryptanalysis/logs/adv-mixer-3/diff-20733-k1.log Normal file
View file

@ -0,0 +1,11 @@
adv-mixer-3 diff day=20733 apps=1 start=8 plant=None unix=1791398815
key = e23f9008 de33e763 c5ba415d 8ddf6786 59f4a4be 8a3bc680 701b8e40 3b59025a
rot = [28, 11, 18, 18, 13, 28, 5, 13]
mul = d1d79e7f bcb61f8b 970e91ab d749d96d 143d7339 2cde0d69 12d0a8c1 2d335be9 80a8aae9 7ac896c7 9de23db7 c362827d 5f4cdb5b fc6c5097 6f547f83 1ac31b47
rc = e5bef5a3 db2a7d90 cd1fa7e1 30289419 0a730d58 432f8579 6ab978a5 8c984f49 788c3c9e 051eef02 05e77db9 8b3cd4f3 6948d6cf 0d8677f6 f9505c8c 4513c163
keys = 8ff34781
diff: samples=1048576 per difference, 576 differences, wall=20.7s band=2^-20.0
max multiplicity of one output difference: 1 (input difference #0, p about 9.54e-7); a random map gives 1 or 2
deterministic output bits: total 537 over all differences, max per difference 40 of 512
zero output words: max in any pair 4 of 16, mean per pair 0.000000 (random: 0.000000)
verdict: DISTINGUISHED

11
docs/analysis/cryptanalysis/logs/adv-mixer-3/diff-20733-k2.log Normal file
View file

@ -0,0 +1,11 @@
adv-mixer-3 diff day=20733 apps=2 start=8 plant=None unix=1791398836
key = e23f9008 de33e763 c5ba415d 8ddf6786 59f4a4be 8a3bc680 701b8e40 3b59025a
rot = [28, 11, 18, 18, 13, 28, 5, 13]
mul = d1d79e7f bcb61f8b 970e91ab d749d96d 143d7339 2cde0d69 12d0a8c1 2d335be9 80a8aae9 7ac896c7 9de23db7 c362827d 5f4cdb5b fc6c5097 6f547f83 1ac31b47
rc = e5bef5a3 db2a7d90 cd1fa7e1 30289419 0a730d58 432f8579 6ab978a5 8c984f49 788c3c9e 051eef02 05e77db9 8b3cd4f3 6948d6cf 0d8677f6 f9505c8c 4513c163
keys = 8ff34781 2e2ac13a
diff: samples=1048576 per difference, 576 differences, wall=30.9s band=2^-20.0
max multiplicity of one output difference: 1 (input difference #0, p about 9.54e-7); a random map gives 1 or 2
deterministic output bits: total 0 over all differences, max per difference 0 of 512
zero output words: max in any pair 1 of 16, mean per pair 0.000000 (random: 0.000000)
verdict: no differential above the band

11
docs/analysis/cryptanalysis/logs/adv-mixer-3/diff-20733-k3.log Normal file
View file

@ -0,0 +1,11 @@
adv-mixer-3 diff day=20733 apps=3 start=8 plant=None unix=1791398867
key = e23f9008 de33e763 c5ba415d 8ddf6786 59f4a4be 8a3bc680 701b8e40 3b59025a
rot = [28, 11, 18, 18, 13, 28, 5, 13]
mul = d1d79e7f bcb61f8b 970e91ab d749d96d 143d7339 2cde0d69 12d0a8c1 2d335be9 80a8aae9 7ac896c7 9de23db7 c362827d 5f4cdb5b fc6c5097 6f547f83 1ac31b47
rc = e5bef5a3 db2a7d90 cd1fa7e1 30289419 0a730d58 432f8579 6ab978a5 8c984f49 788c3c9e 051eef02 05e77db9 8b3cd4f3 6948d6cf 0d8677f6 f9505c8c 4513c163
keys = 8ff34781 2e2ac13a cc623af3
diff: samples=1048576 per difference, 576 differences, wall=35.3s band=2^-20.0
max multiplicity of one output difference: 1 (input difference #0, p about 9.54e-7); a random map gives 1 or 2
deterministic output bits: total 0 over all differences, max per difference 0 of 512
zero output words: max in any pair 1 of 16, mean per pair 0.000000 (random: 0.000000)
verdict: no differential above the band

11
docs/analysis/cryptanalysis/logs/adv-mixer-3/diff-20733-k4.log Normal file
View file

@ -0,0 +1,11 @@
adv-mixer-3 diff day=20733 apps=4 start=8 plant=None unix=1791398902
key = e23f9008 de33e763 c5ba415d 8ddf6786 59f4a4be 8a3bc680 701b8e40 3b59025a
rot = [28, 11, 18, 18, 13, 28, 5, 13]
mul = d1d79e7f bcb61f8b 970e91ab d749d96d 143d7339 2cde0d69 12d0a8c1 2d335be9 80a8aae9 7ac896c7 9de23db7 c362827d 5f4cdb5b fc6c5097 6f547f83 1ac31b47
rc = e5bef5a3 db2a7d90 cd1fa7e1 30289419 0a730d58 432f8579 6ab978a5 8c984f49 788c3c9e 051eef02 05e77db9 8b3cd4f3 6948d6cf 0d8677f6 f9505c8c 4513c163
keys = 8ff34781 2e2ac13a cc623af3 6a99b4ac
diff: samples=1048576 per difference, 576 differences, wall=43.0s band=2^-20.0
max multiplicity of one output difference: 1 (input difference #0, p about 9.54e-7); a random map gives 1 or 2
deterministic output bits: total 0 over all differences, max per difference 0 of 512
zero output words: max in any pair 1 of 16, mean per pair 0.000000 (random: 0.000000)
verdict: no differential above the band

11
docs/analysis/cryptanalysis/logs/adv-mixer-3/diff-20733-k5.log Normal file
View file

@ -0,0 +1,11 @@
adv-mixer-3 diff day=20733 apps=5 start=8 plant=None unix=1791398945
key = e23f9008 de33e763 c5ba415d 8ddf6786 59f4a4be 8a3bc680 701b8e40 3b59025a
rot = [28, 11, 18, 18, 13, 28, 5, 13]
mul = d1d79e7f bcb61f8b 970e91ab d749d96d 143d7339 2cde0d69 12d0a8c1 2d335be9 80a8aae9 7ac896c7 9de23db7 c362827d 5f4cdb5b fc6c5097 6f547f83 1ac31b47
rc = e5bef5a3 db2a7d90 cd1fa7e1 30289419 0a730d58 432f8579 6ab978a5 8c984f49 788c3c9e 051eef02 05e77db9 8b3cd4f3 6948d6cf 0d8677f6 f9505c8c 4513c163
keys = 8ff34781 2e2ac13a cc623af3 6a99b4ac 08d12e65
diff: samples=1048576 per difference, 576 differences, wall=59.4s band=2^-20.0
max multiplicity of one output difference: 1 (input difference #0, p about 9.54e-7); a random map gives 1 or 2
deterministic output bits: total 0 over all differences, max per difference 0 of 512
zero output words: max in any pair 1 of 16, mean per pair 0.000000 (random: 0.000000)
verdict: no differential above the band

11
docs/analysis/cryptanalysis/logs/adv-mixer-3/diff-20733-k6.log Normal file
View file

@ -0,0 +1,11 @@
adv-mixer-3 diff day=20733 apps=6 start=8 plant=None unix=1791399004
key = e23f9008 de33e763 c5ba415d 8ddf6786 59f4a4be 8a3bc680 701b8e40 3b59025a
rot = [28, 11, 18, 18, 13, 28, 5, 13]
mul = d1d79e7f bcb61f8b 970e91ab d749d96d 143d7339 2cde0d69 12d0a8c1 2d335be9 80a8aae9 7ac896c7 9de23db7 c362827d 5f4cdb5b fc6c5097 6f547f83 1ac31b47
rc = e5bef5a3 db2a7d90 cd1fa7e1 30289419 0a730d58 432f8579 6ab978a5 8c984f49 788c3c9e 051eef02 05e77db9 8b3cd4f3 6948d6cf 0d8677f6 f9505c8c 4513c163
keys = 8ff34781 2e2ac13a cc623af3 6a99b4ac 08d12e65 a708a81e
diff: samples=1048576 per difference, 576 differences, wall=67.7s band=2^-20.0
max multiplicity of one output difference: 1 (input difference #0, p about 9.54e-7); a random map gives 1 or 2
deterministic output bits: total 0 over all differences, max per difference 0 of 512
zero output words: max in any pair 1 of 16, mean per pair 0.000000 (random: 0.000000)
verdict: no differential above the band

11
docs/analysis/cryptanalysis/logs/adv-mixer-3/diff-20733-k7.log Normal file
View file

@ -0,0 +1,11 @@
adv-mixer-3 diff day=20733 apps=7 start=8 plant=None unix=1791399072
key = e23f9008 de33e763 c5ba415d 8ddf6786 59f4a4be 8a3bc680 701b8e40 3b59025a
rot = [28, 11, 18, 18, 13, 28, 5, 13]
mul = d1d79e7f bcb61f8b 970e91ab d749d96d 143d7339 2cde0d69 12d0a8c1 2d335be9 80a8aae9 7ac896c7 9de23db7 c362827d 5f4cdb5b fc6c5097 6f547f83 1ac31b47
rc = e5bef5a3 db2a7d90 cd1fa7e1 30289419 0a730d58 432f8579 6ab978a5 8c984f49 788c3c9e 051eef02 05e77db9 8b3cd4f3 6948d6cf 0d8677f6 f9505c8c 4513c163
keys = 8ff34781 2e2ac13a cc623af3 6a99b4ac 08d12e65 a708a81e 454021d7
diff: samples=1048576 per difference, 576 differences, wall=121.9s band=2^-20.0
max multiplicity of one output difference: 1 (input difference #0, p about 9.54e-7); a random map gives 1 or 2
deterministic output bits: total 0 over all differences, max per difference 0 of 512
zero output words: max in any pair 1 of 16, mean per pair 0.000000 (random: 0.000000)
verdict: no differential above the band

6
docs/analysis/cryptanalysis/logs/adv-mixer-3/diff-20733-k8.log Normal file
View file

@ -0,0 +1,6 @@
adv-mixer-3 diff day=20733 apps=8 start=8 plant=None unix=1791399194
key = e23f9008 de33e763 c5ba415d 8ddf6786 59f4a4be 8a3bc680 701b8e40 3b59025a
rot = [28, 11, 18, 18, 13, 28, 5, 13]
mul = d1d79e7f bcb61f8b 970e91ab d749d96d 143d7339 2cde0d69 12d0a8c1 2d335be9 80a8aae9 7ac896c7 9de23db7 c362827d 5f4cdb5b fc6c5097 6f547f83 1ac31b47
rc = e5bef5a3 db2a7d90 cd1fa7e1 30289419 0a730d58 432f8579 6ab978a5 8c984f49 788c3c9e 051eef02 05e77db9 8b3cd4f3 6948d6cf 0d8677f6 f9505c8c 4513c163
keys = 8ff34781 2e2ac13a cc623af3 6a99b4ac 08d12e65 a708a81e 454021d7 e3779b90

11
docs/analysis/cryptanalysis/logs/adv-mixer-3/diff-20733-nomul-k1.log Normal file
View file

@ -0,0 +1,11 @@
adv-mixer-3 diff day=20733 apps=1 start=8 plant=NoMul unix=1791398814
key = e23f9008 de33e763 c5ba415d 8ddf6786 59f4a4be 8a3bc680 701b8e40 3b59025a
rot = [28, 11, 18, 18, 13, 28, 5, 13]
mul = 00000001 00000001 00000001 00000001 00000001 00000001 00000001 00000001 00000001 00000001 00000001 00000001 00000001 00000001 00000001 00000001
rc = e5bef5a3 db2a7d90 cd1fa7e1 30289419 0a730d58 432f8579 6ab978a5 8c984f49 788c3c9e 051eef02 05e77db9 8b3cd4f3 6948d6cf 0d8677f6 f9505c8c 4513c163
keys = 8ff34781
diff: samples=65536 per difference, 576 differences, wall=1.1s band=2^-16.0
max multiplicity of one output difference: 1 (input difference #0, p about 1.53e-5); a random map gives 1 or 2
deterministic output bits: total 7189 over all differences, max per difference 75 of 512
zero output words: max in any pair 1 of 16, mean per pair 0.000000 (random: 0.000000)
verdict: DISTINGUISHED

13
docs/analysis/cryptanalysis/logs/adv-mixer-3/index-20729-k0.log Normal file
View file

@ -0,0 +1,13 @@
adv-mixer-3 index day=20729 apps=0 start=0 plant=None unix=1791398525
key = 528b3e14 2e689968 ffc58df7 b7f348cb 8c15a789 703473e8 e58713af 0cfe196a
rot = [6, 25, 5, 25, 29, 11, 9, 21]
mul = addda577 e83ff665 a15aee9f 31ffb8cb e72c824d 225e647b 3ec0ace3 d1eb11d5 fa5c7dc5 40128acf 70bc55cf b823fa39 07fcdf49 56a6c8b1 c05d3115 02063ddd
rc = 0655b978 2c53cb31 e14235d3 30d45c30 5b07a13b 25271fad 418b165b f7fe03d7 67943b1d 5ba337a2 24aa3983 6abbbed4 12488b47 a4a81e53 96f96da0 b86823f8
keys =
census: n=2^32 bins=2^22 expect=1024 wall=31.8s
chi2=18014394214514688.0 df=4194303 z=6219776281047.55 empty=4194303 min=0 max=4294967296 argmax=0xb3e14
segments(2^16): chi2=281470681743360.0 z=777466196148.62 lines-in-segment(64): chi2=270582939648.0 z=24105444157.93
bins >= 1184 (5 sigma high): 1 (uniform expects about 1.2); bins <= 864: 4194303 (about 1.2)
s[0] bit balance over 2^32: worst bit 0 z=-65536.00; low 22 bits worst z=65536.00
state bit balance over 2^24 sample: worst bit 0 (word 0) z=-4096.00; bits beyond 6 sigma: 320 of 512
verdict: NON-UNIFORM

13
docs/analysis/cryptanalysis/logs/adv-mixer-3/index-20729-k1.log Normal file
View file

@ -0,0 +1,13 @@
adv-mixer-3 index day=20729 apps=1 start=0 plant=None unix=1791398557
key = 528b3e14 2e689968 ffc58df7 b7f348cb 8c15a789 703473e8 e58713af 0cfe196a
rot = [6, 25, 5, 25, 29, 11, 9, 21]
mul = addda577 e83ff665 a15aee9f 31ffb8cb e72c824d 225e647b 3ec0ace3 d1eb11d5 fa5c7dc5 40128acf 70bc55cf b823fa39 07fcdf49 56a6c8b1 c05d3115 02063ddd
rc = 0655b978 2c53cb31 e14235d3 30d45c30 5b07a13b 25271fad 418b165b f7fe03d7 67943b1d 5ba337a2 24aa3983 6abbbed4 12488b47 a4a81e53 96f96da0 b86823f8
keys = 9e3779b9
census: n=2^32 bins=2^22 expect=1024 wall=153.5s
chi2=4191025.3 df=4194303 z=-1.13 empty=0 min=871 max=1191 argmax=0x59808
segments(2^16): chi2=64812.7 z=-2.00 lines-in-segment(64): chi2=60.1 z=-0.26
bins >= 1184 (5 sigma high): 3 (uniform expects about 1.2); bins <= 864: 0 (about 1.2)
s[0] bit balance over 2^32: worst bit 16 z=2.52; low 22 bits worst z=2.52
state bit balance over 2^24 sample: worst bit 322 (word 10) z=3.65; bits beyond 6 sigma: 0 of 512
verdict: uniform within the band

13
docs/analysis/cryptanalysis/logs/adv-mixer-3/index-20729-k2.log Normal file
View file

@ -0,0 +1,13 @@
adv-mixer-3 index day=20729 apps=2 start=0 plant=None unix=1791398713
key = 528b3e14 2e689968 ffc58df7 b7f348cb 8c15a789 703473e8 e58713af 0cfe196a
rot = [6, 25, 5, 25, 29, 11, 9, 21]
mul = addda577 e83ff665 a15aee9f 31ffb8cb e72c824d 225e647b 3ec0ace3 d1eb11d5 fa5c7dc5 40128acf 70bc55cf b823fa39 07fcdf49 56a6c8b1 c05d3115 02063ddd
rc = 0655b978 2c53cb31 e14235d3 30d45c30 5b07a13b 25271fad 418b165b f7fe03d7 67943b1d 5ba337a2 24aa3983 6abbbed4 12488b47 a4a81e53 96f96da0 b86823f8
keys = 9e3779b9 3c6ef372
census: n=2^32 bins=2^22 expect=1024 wall=120.0s
chi2=4192336.5 df=4194303 z=-0.68 empty=0 min=874 max=1191 argmax=0x136878
segments(2^16): chi2=65738.0 z=0.56 lines-in-segment(64): chi2=61.4 z=-0.14
bins >= 1184 (5 sigma high): 1 (uniform expects about 1.2); bins <= 864: 0 (about 1.2)
s[0] bit balance over 2^32: worst bit 3 z=-2.37; low 22 bits worst z=2.37
state bit balance over 2^24 sample: worst bit 424 (word 13) z=3.76; bits beyond 6 sigma: 0 of 512
verdict: uniform within the band

13
docs/analysis/cryptanalysis/logs/adv-mixer-3/index-20729-k3.log Normal file
View file

@ -0,0 +1,13 @@
adv-mixer-3 index day=20729 apps=3 start=0 plant=None unix=1791398834
key = 528b3e14 2e689968 ffc58df7 b7f348cb 8c15a789 703473e8 e58713af 0cfe196a
rot = [6, 25, 5, 25, 29, 11, 9, 21]
mul = addda577 e83ff665 a15aee9f 31ffb8cb e72c824d 225e647b 3ec0ace3 d1eb11d5 fa5c7dc5 40128acf 70bc55cf b823fa39 07fcdf49 56a6c8b1 c05d3115 02063ddd
rc = 0655b978 2c53cb31 e14235d3 30d45c30 5b07a13b 25271fad 418b165b f7fe03d7 67943b1d 5ba337a2 24aa3983 6abbbed4 12488b47 a4a81e53 96f96da0 b86823f8
keys = 9e3779b9 3c6ef372 daa66d2b
census: n=2^32 bins=2^22 expect=1024 wall=77.0s
chi2=4193186.3 df=4194303 z=-0.39 empty=0 min=853 max=1187 argmax=0x1ce18c
segments(2^16): chi2=65522.6 z=-0.03 lines-in-segment(64): chi2=50.1 z=-1.15
bins >= 1184 (5 sigma high): 2 (uniform expects about 1.2); bins <= 864: 2 (about 1.2)
s[0] bit balance over 2^32: worst bit 29 z=2.24; low 22 bits worst z=1.64
state bit balance over 2^24 sample: worst bit 260 (word 8) z=-3.59; bits beyond 6 sigma: 0 of 512
verdict: uniform within the band

13
docs/analysis/cryptanalysis/logs/adv-mixer-3/index-20729-k4.log Normal file
View file

@ -0,0 +1,13 @@
adv-mixer-3 index day=20729 apps=4 start=0 plant=None unix=1791398912
key = 528b3e14 2e689968 ffc58df7 b7f348cb 8c15a789 703473e8 e58713af 0cfe196a
rot = [6, 25, 5, 25, 29, 11, 9, 21]
mul = addda577 e83ff665 a15aee9f 31ffb8cb e72c824d 225e647b 3ec0ace3 d1eb11d5 fa5c7dc5 40128acf 70bc55cf b823fa39 07fcdf49 56a6c8b1 c05d3115 02063ddd
rc = 0655b978 2c53cb31 e14235d3 30d45c30 5b07a13b 25271fad 418b165b f7fe03d7 67943b1d 5ba337a2 24aa3983 6abbbed4 12488b47 a4a81e53 96f96da0 b86823f8
keys = 9e3779b9 3c6ef372 daa66d2b 78dde6e4
census: n=2^32 bins=2^22 expect=1024 wall=181.6s
chi2=4192938.9 df=4194303 z=-0.47 empty=0 min=857 max=1190 argmax=0x5aee9
segments(2^16): chi2=65923.7 z=1.07 lines-in-segment(64): chi2=60.2 z=-0.25
bins >= 1184 (5 sigma high): 2 (uniform expects about 1.2); bins <= 864: 2 (about 1.2)
s[0] bit balance over 2^32: worst bit 6 z=-1.90; low 22 bits worst z=1.90
state bit balance over 2^24 sample: worst bit 141 (word 4) z=3.44; bits beyond 6 sigma: 0 of 512
verdict: uniform within the band

6
docs/analysis/cryptanalysis/logs/adv-mixer-3/index-20729-k5.log Normal file
View file

@ -0,0 +1,6 @@
adv-mixer-3 index day=20729 apps=5 start=0 plant=None unix=1791399095
key = 528b3e14 2e689968 ffc58df7 b7f348cb 8c15a789 703473e8 e58713af 0cfe196a
rot = [6, 25, 5, 25, 29, 11, 9, 21]
mul = addda577 e83ff665 a15aee9f 31ffb8cb e72c824d 225e647b 3ec0ace3 d1eb11d5 fa5c7dc5 40128acf 70bc55cf b823fa39 07fcdf49 56a6c8b1 c05d3115 02063ddd
rc = 0655b978 2c53cb31 e14235d3 30d45c30 5b07a13b 25271fad 418b165b f7fe03d7 67943b1d 5ba337a2 24aa3983 6abbbed4 12488b47 a4a81e53 96f96da0 b86823f8
keys = 9e3779b9 3c6ef372 daa66d2b 78dde6e4 1715609d

13
docs/analysis/cryptanalysis/logs/adv-mixer-3/index-20733-k0.log Normal file
View file

@ -0,0 +1,13 @@
adv-mixer-3 index day=20733 apps=0 start=0 plant=None unix=1791398814
key = e23f9008 de33e763 c5ba415d 8ddf6786 59f4a4be 8a3bc680 701b8e40 3b59025a
rot = [28, 11, 18, 18, 13, 28, 5, 13]
mul = d1d79e7f bcb61f8b 970e91ab d749d96d 143d7339 2cde0d69 12d0a8c1 2d335be9 80a8aae9 7ac896c7 9de23db7 c362827d 5f4cdb5b fc6c5097 6f547f83 1ac31b47
rc = e5bef5a3 db2a7d90 cd1fa7e1 30289419 0a730d58 432f8579 6ab978a5 8c984f49 788c3c9e 051eef02 05e77db9 8b3cd4f3 6948d6cf 0d8677f6 f9505c8c 4513c163
keys =
census: n=2^32 bins=2^22 expect=1024 wall=28.7s
chi2=18014394214514688.0 df=4194303 z=6219776281047.55 empty=4194303 min=0 max=4294967296 argmax=0x3f9008
segments(2^16): chi2=281470681743360.0 z=777466196148.62 lines-in-segment(64): chi2=270582939648.0 z=24105444157.93
bins >= 1184 (5 sigma high): 1 (uniform expects about 1.2); bins <= 864: 4194303 (about 1.2)
s[0] bit balance over 2^32: worst bit 0 z=-65536.00; low 22 bits worst z=65536.00
state bit balance over 2^24 sample: worst bit 0 (word 0) z=-4096.00; bits beyond 6 sigma: 320 of 512
verdict: NON-UNIFORM

13
docs/analysis/cryptanalysis/logs/adv-mixer-3/index-20733-k1.log Normal file
View file

@ -0,0 +1,13 @@
adv-mixer-3 index day=20733 apps=1 start=0 plant=None unix=1791398843
key = e23f9008 de33e763 c5ba415d 8ddf6786 59f4a4be 8a3bc680 701b8e40 3b59025a
rot = [28, 11, 18, 18, 13, 28, 5, 13]
mul = d1d79e7f bcb61f8b 970e91ab d749d96d 143d7339 2cde0d69 12d0a8c1 2d335be9 80a8aae9 7ac896c7 9de23db7 c362827d 5f4cdb5b fc6c5097 6f547f83 1ac31b47
rc = e5bef5a3 db2a7d90 cd1fa7e1 30289419 0a730d58 432f8579 6ab978a5 8c984f49 788c3c9e 051eef02 05e77db9 8b3cd4f3 6948d6cf 0d8677f6 f9505c8c 4513c163
keys = 9e3779b9
census: n=2^32 bins=2^22 expect=1024 wall=213.0s
chi2=4192241.1 df=4194303 z=-0.71 empty=0 min=863 max=1202 argmax=0x35b3a5
segments(2^16): chi2=65576.5 z=0.11 lines-in-segment(64): chi2=56.2 z=-0.60
bins >= 1184 (5 sigma high): 3 (uniform expects about 1.2); bins <= 864: 1 (about 1.2)
s[0] bit balance over 2^32: worst bit 3 z=-1.90; low 22 bits worst z=1.90
state bit balance over 2^24 sample: worst bit 162 (word 5) z=2.71; bits beyond 6 sigma: 0 of 512
verdict: uniform within the band

6
docs/analysis/cryptanalysis/logs/adv-mixer-3/index-20733-k2.log Normal file
View file

@ -0,0 +1,6 @@
adv-mixer-3 index day=20733 apps=2 start=0 plant=None unix=1791399056
key = e23f9008 de33e763 c5ba415d 8ddf6786 59f4a4be 8a3bc680 701b8e40 3b59025a
rot = [28, 11, 18, 18, 13, 28, 5, 13]
mul = d1d79e7f bcb61f8b 970e91ab d749d96d 143d7339 2cde0d69 12d0a8c1 2d335be9 80a8aae9 7ac896c7 9de23db7 c362827d 5f4cdb5b fc6c5097 6f547f83 1ac31b47
rc = e5bef5a3 db2a7d90 cd1fa7e1 30289419 0a730d58 432f8579 6ab978a5 8c984f49 788c3c9e 051eef02 05e77db9 8b3cd4f3 6948d6cf 0d8677f6 f9505c8c 4513c163
keys = 9e3779b9 3c6ef372

10
docs/analysis/cryptanalysis/logs/adv-mixer-3/lin-20729-k0.log Normal file
View file

@ -0,0 +1,10 @@
adv-mixer-3 lin day=20729 apps=0 start=8 plant=None unix=1791398826
key = 528b3e14 2e689968 ffc58df7 b7f348cb 8c15a789 703473e8 e58713af 0cfe196a
rot = [6, 25, 5, 25, 29, 11, 9, 21]
mul = addda577 e83ff665 a15aee9f 31ffb8cb e72c824d 225e647b 3ec0ace3 d1eb11d5 fa5c7dc5 40128acf 70bc55cf b823fa39 07fcdf49 56a6c8b1 c05d3115 02063ddd
rc = 0655b978 2c53cb31 e14235d3 30d45c30 5b07a13b 25271fad 418b165b f7fe03d7 67943b1d 5ba337a2 24aa3983 6abbbed4 12488b47 a4a81e53 96f96da0 b86823f8
keys =
lin: samples=1048576 wall=0.5s band(6 sigma)=0.00586 inputs=512
worst correlation in=0 out=0 (word 0) c=1.00000 z=1024.00; cells beyond6=512 beyond8=512 of 262144
line index cells (out bits 0..21): worst z=1024.00 beyond6=22; output bit balance worst z=3.20
verdict: DISTINGUISHED

10
docs/analysis/cryptanalysis/logs/adv-mixer-3/lin-20729-k1.log Normal file
View file

@ -0,0 +1,10 @@
adv-mixer-3 lin day=20729 apps=1 start=8 plant=None unix=1791398826
key = 528b3e14 2e689968 ffc58df7 b7f348cb 8c15a789 703473e8 e58713af 0cfe196a
rot = [6, 25, 5, 25, 29, 11, 9, 21]
mul = addda577 e83ff665 a15aee9f 31ffb8cb e72c824d 225e647b 3ec0ace3 d1eb11d5 fa5c7dc5 40128acf 70bc55cf b823fa39 07fcdf49 56a6c8b1 c05d3115 02063ddd
rc = 0655b978 2c53cb31 e14235d3 30d45c30 5b07a13b 25271fad 418b165b f7fe03d7 67943b1d 5ba337a2 24aa3983 6abbbed4 12488b47 a4a81e53 96f96da0 b86823f8
keys = 8ff34781
lin: samples=67108864 wall=37.5s band(6 sigma)=0.00073 inputs=512
worst correlation in=92 out=396 (word 12) c=-0.00056 z=-4.61; cells beyond6=0 beyond8=0 of 262144
line index cells (out bits 0..21): worst z=-3.72 beyond6=0; output bit balance worst z=3.82
verdict: no correlation beyond 6 sigma

10
docs/analysis/cryptanalysis/logs/adv-mixer-3/lin-20729-k2.log Normal file
View file

@ -0,0 +1,10 @@
adv-mixer-3 lin day=20729 apps=2 start=8 plant=None unix=1791398864
key = 528b3e14 2e689968 ffc58df7 b7f348cb 8c15a789 703473e8 e58713af 0cfe196a
rot = [6, 25, 5, 25, 29, 11, 9, 21]
mul = addda577 e83ff665 a15aee9f 31ffb8cb e72c824d 225e647b 3ec0ace3 d1eb11d5 fa5c7dc5 40128acf 70bc55cf b823fa39 07fcdf49 56a6c8b1 c05d3115 02063ddd
rc = 0655b978 2c53cb31 e14235d3 30d45c30 5b07a13b 25271fad 418b165b f7fe03d7 67943b1d 5ba337a2 24aa3983 6abbbed4 12488b47 a4a81e53 96f96da0 b86823f8
keys = 8ff34781 2e2ac13a
lin: samples=67108864 wall=33.5s band(6 sigma)=0.00073 inputs=512
worst correlation in=217 out=54 (word 1) c=0.00058 z=4.73; cells beyond6=0 beyond8=0 of 262144
line index cells (out bits 0..21): worst z=4.09 beyond6=0; output bit balance worst z=3.47
verdict: no correlation beyond 6 sigma

10
docs/analysis/cryptanalysis/logs/adv-mixer-3/lin-20729-k3.log Normal file
View file

@ -0,0 +1,10 @@
adv-mixer-3 lin day=20729 apps=3 start=8 plant=None unix=1791398898
key = 528b3e14 2e689968 ffc58df7 b7f348cb 8c15a789 703473e8 e58713af 0cfe196a
rot = [6, 25, 5, 25, 29, 11, 9, 21]
mul = addda577 e83ff665 a15aee9f 31ffb8cb e72c824d 225e647b 3ec0ace3 d1eb11d5 fa5c7dc5 40128acf 70bc55cf b823fa39 07fcdf49 56a6c8b1 c05d3115 02063ddd
rc = 0655b978 2c53cb31 e14235d3 30d45c30 5b07a13b 25271fad 418b165b f7fe03d7 67943b1d 5ba337a2 24aa3983 6abbbed4 12488b47 a4a81e53 96f96da0 b86823f8
keys = 8ff34781 2e2ac13a cc623af3
lin: samples=67108864 wall=41.2s band(6 sigma)=0.00073 inputs=512
worst correlation in=284 out=214 (word 6) c=0.00056 z=4.61; cells beyond6=0 beyond8=0 of 262144
line index cells (out bits 0..21): worst z=-3.95 beyond6=0; output bit balance worst z=3.17
verdict: no correlation beyond 6 sigma

10
docs/analysis/cryptanalysis/logs/adv-mixer-3/lin-20729-k4.log Normal file
View file

@ -0,0 +1,10 @@
adv-mixer-3 lin day=20729 apps=4 start=8 plant=None unix=1791398939
key = 528b3e14 2e689968 ffc58df7 b7f348cb 8c15a789 703473e8 e58713af 0cfe196a
rot = [6, 25, 5, 25, 29, 11, 9, 21]
mul = addda577 e83ff665 a15aee9f 31ffb8cb e72c824d 225e647b 3ec0ace3 d1eb11d5 fa5c7dc5 40128acf 70bc55cf b823fa39 07fcdf49 56a6c8b1 c05d3115 02063ddd
rc = 0655b978 2c53cb31 e14235d3 30d45c30 5b07a13b 25271fad 418b165b f7fe03d7 67943b1d 5ba337a2 24aa3983 6abbbed4 12488b47 a4a81e53 96f96da0 b86823f8
keys = 8ff34781 2e2ac13a cc623af3 6a99b4ac
lin: samples=67108864 wall=56.7s band(6 sigma)=0.00073 inputs=512
worst correlation in=71 out=178 (word 5) c=-0.00056 z=-4.61; cells beyond6=0 beyond8=0 of 262144
line index cells (out bits 0..21): worst z=4.18 beyond6=0; output bit balance worst z=3.08
verdict: no correlation beyond 6 sigma

10
docs/analysis/cryptanalysis/logs/adv-mixer-3/lin-20729-k5.log Normal file
View file

@ -0,0 +1,10 @@
adv-mixer-3 lin day=20729 apps=5 start=8 plant=None unix=1791398996
key = 528b3e14 2e689968 ffc58df7 b7f348cb 8c15a789 703473e8 e58713af 0cfe196a
rot = [6, 25, 5, 25, 29, 11, 9, 21]
mul = addda577 e83ff665 a15aee9f 31ffb8cb e72c824d 225e647b 3ec0ace3 d1eb11d5 fa5c7dc5 40128acf 70bc55cf b823fa39 07fcdf49 56a6c8b1 c05d3115 02063ddd
rc = 0655b978 2c53cb31 e14235d3 30d45c30 5b07a13b 25271fad 418b165b f7fe03d7 67943b1d 5ba337a2 24aa3983 6abbbed4 12488b47 a4a81e53 96f96da0 b86823f8
keys = 8ff34781 2e2ac13a cc623af3 6a99b4ac 08d12e65
lin: samples=67108864 wall=101.1s band(6 sigma)=0.00073 inputs=512
worst correlation in=190 out=458 (word 14) c=0.00057 z=4.64; cells beyond6=0 beyond8=0 of 262144
line index cells (out bits 0..21): worst z=4.14 beyond6=0; output bit balance worst z=3.27
verdict: no correlation beyond 6 sigma

10
docs/analysis/cryptanalysis/logs/adv-mixer-3/lin-20729-k6.log Normal file
View file

@ -0,0 +1,10 @@
adv-mixer-3 lin day=20729 apps=6 start=8 plant=None unix=1791399097
key = 528b3e14 2e689968 ffc58df7 b7f348cb 8c15a789 703473e8 e58713af 0cfe196a
rot = [6, 25, 5, 25, 29, 11, 9, 21]
mul = addda577 e83ff665 a15aee9f 31ffb8cb e72c824d 225e647b 3ec0ace3 d1eb11d5 fa5c7dc5 40128acf 70bc55cf b823fa39 07fcdf49 56a6c8b1 c05d3115 02063ddd
rc = 0655b978 2c53cb31 e14235d3 30d45c30 5b07a13b 25271fad 418b165b f7fe03d7 67943b1d 5ba337a2 24aa3983 6abbbed4 12488b47 a4a81e53 96f96da0 b86823f8
keys = 8ff34781 2e2ac13a cc623af3 6a99b4ac 08d12e65 a708a81e
lin: samples=67108864 wall=108.5s band(6 sigma)=0.00073 inputs=512
worst correlation in=473 out=328 (word 10) c=-0.00055 z=-4.54; cells beyond6=0 beyond8=0 of 262144
line index cells (out bits 0..21): worst z=4.21 beyond6=0; output bit balance worst z=2.98
verdict: no correlation beyond 6 sigma

6
docs/analysis/cryptanalysis/logs/adv-mixer-3/lin-20729-k7.log Normal file
View file

@ -0,0 +1,6 @@
adv-mixer-3 lin day=20729 apps=7 start=8 plant=None unix=1791399205
key = 528b3e14 2e689968 ffc58df7 b7f348cb 8c15a789 703473e8 e58713af 0cfe196a
rot = [6, 25, 5, 25, 29, 11, 9, 21]
mul = addda577 e83ff665 a15aee9f 31ffb8cb e72c824d 225e647b 3ec0ace3 d1eb11d5 fa5c7dc5 40128acf 70bc55cf b823fa39 07fcdf49 56a6c8b1 c05d3115 02063ddd
rc = 0655b978 2c53cb31 e14235d3 30d45c30 5b07a13b 25271fad 418b165b f7fe03d7 67943b1d 5ba337a2 24aa3983 6abbbed4 12488b47 a4a81e53 96f96da0 b86823f8
keys = 8ff34781 2e2ac13a cc623af3 6a99b4ac 08d12e65 a708a81e 454021d7

10
docs/analysis/cryptanalysis/logs/adv-mixer-3/sac-20729-k1.log Normal file
View file

@ -0,0 +1,10 @@
adv-mixer-3 sac day=20729 apps=1 start=8 plant=None unix=1791398533
key = 528b3e14 2e689968 ffc58df7 b7f348cb 8c15a789 703473e8 e58713af 0cfe196a
rot = [6, 25, 5, 25, 29, 11, 9, 21]
mul = addda577 e83ff665 a15aee9f 31ffb8cb e72c824d 225e647b 3ec0ace3 d1eb11d5 fa5c7dc5 40128acf 70bc55cf b823fa39 07fcdf49 56a6c8b1 c05d3115 02063ddd
rc = 0655b978 2c53cb31 e14235d3 30d45c30 5b07a13b 25271fad 418b165b f7fe03d7 67943b1d 5ba337a2 24aa3983 6abbbed4 12488b47 a4a81e53 96f96da0 b86823f8
keys = 8ff34781
sac: states=16777216 wall=379.0s band(6 sigma)=0.00073
holes=354 beyond6=129726 beyond8=126336 mean_flip=0.46118 worst in=279 (word 8) out=64 (word 2) p=1.00000 z=4096.00
line index cells (out bits 0..21): worst z=4096.00 beyond6=7930 of 11264
verdict: DISTINGUISHED

6
docs/analysis/cryptanalysis/logs/adv-mixer-3/sac-20729-k2.log Normal file
View file

@ -0,0 +1,6 @@
adv-mixer-3 sac day=20729 apps=2 start=8 plant=None unix=1791398912
key = 528b3e14 2e689968 ffc58df7 b7f348cb 8c15a789 703473e8 e58713af 0cfe196a
rot = [6, 25, 5, 25, 29, 11, 9, 21]
mul = addda577 e83ff665 a15aee9f 31ffb8cb e72c824d 225e647b 3ec0ace3 d1eb11d5 fa5c7dc5 40128acf 70bc55cf b823fa39 07fcdf49 56a6c8b1 c05d3115 02063ddd
rc = 0655b978 2c53cb31 e14235d3 30d45c30 5b07a13b 25271fad 418b165b f7fe03d7 67943b1d 5ba337a2 24aa3983 6abbbed4 12488b47 a4a81e53 96f96da0 b86823f8
keys = 8ff34781 2e2ac13a

10
docs/analysis/cryptanalysis/logs/adv-mixer-3/sac-20729-one-k8.log Normal file
View file

@ -0,0 +1,10 @@
adv-mixer-3 sac day=20729 apps=8 start=8 plant=One unix=1791398530
key = 528b3e14 2e689968 ffc58df7 b7f348cb 8c15a789 703473e8 e58713af 0cfe196a
rot = [6, 25, 5, 25, 29, 11, 9, 21]
mul = addda577 e83ff665 a15aee9f 31ffb8cb e72c824d 225e647b 3ec0ace3 d1eb11d5 fa5c7dc5 40128acf 70bc55cf b823fa39 07fcdf49 56a6c8b1 c05d3115 02063ddd
rc = 0655b978 2c53cb31 e14235d3 30d45c30 5b07a13b 25271fad 418b165b f7fe03d7 67943b1d 5ba337a2 24aa3983 6abbbed4 12488b47 a4a81e53 96f96da0 b86823f8
keys = 8ff34781 2e2ac13a cc623af3 6a99b4ac 08d12e65 a708a81e 454021d7 e3779b90
sac: states=65536 wall=3.3s band(6 sigma)=0.01172
holes=1959 beyond6=89129 beyond8=83086 mean_flip=0.46118 worst in=23 (word 0) out=35 (word 1) p=1.00000 z=256.00
line index cells (out bits 0..21): worst z=256.00 beyond6=6077 of 11264
verdict: DISTINGUISHED

10
docs/analysis/cryptanalysis/logs/adv-mixer-3/sac-20729-weak-k8.log Normal file
View file

@ -0,0 +1,10 @@
adv-mixer-3 sac day=20729 apps=8 start=8 plant=Weak unix=1791398525
key = 528b3e14 2e689968 ffc58df7 b7f348cb 8c15a789 703473e8 e58713af 0cfe196a
rot = [16, 16, 16, 16, 16, 16, 16, 16]
mul = 00000001 00000001 00000001 00000001 00000001 00000001 00000001 00000001 00000001 00000001 00000001 00000001 00000001 00000001 00000001 00000001
rc = 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
keys = 8ff34781 2e2ac13a cc623af3 6a99b4ac 08d12e65 a708a81e 454021d7 e3779b90
sac: states=65536 wall=4.5s band(6 sigma)=0.01172
holes=0 beyond6=0 beyond8=0 mean_flip=0.50000 worst in=262 (word 8) out=356 (word 11) p=0.50952 z=4.88
line index cells (out bits 0..21): worst z=4.03 beyond6=0 of 11264
verdict: no cell beyond 6 sigma

6
docs/analysis/cryptanalysis/logs/adv-mixer-3/sac-20733-k1.log Normal file
View file

@ -0,0 +1,6 @@
adv-mixer-3 sac day=20733 apps=1 start=8 plant=None unix=1791398822
key = e23f9008 de33e763 c5ba415d 8ddf6786 59f4a4be 8a3bc680 701b8e40 3b59025a
rot = [28, 11, 18, 18, 13, 28, 5, 13]
mul = d1d79e7f bcb61f8b 970e91ab d749d96d 143d7339 2cde0d69 12d0a8c1 2d335be9 80a8aae9 7ac896c7 9de23db7 c362827d 5f4cdb5b fc6c5097 6f547f83 1ac31b47
rc = e5bef5a3 db2a7d90 cd1fa7e1 30289419 0a730d58 432f8579 6ab978a5 8c984f49 788c3c9e 051eef02 05e77db9 8b3cd4f3 6948d6cf 0d8677f6 f9505c8c 4513c163
keys = 8ff34781

10
docs/analysis/cryptanalysis/logs/adv-mixer-3/sac-20733-one-k8.log Normal file
View file

@ -0,0 +1,10 @@
adv-mixer-3 sac day=20733 apps=8 start=8 plant=One unix=1791398818
key = e23f9008 de33e763 c5ba415d 8ddf6786 59f4a4be 8a3bc680 701b8e40 3b59025a
rot = [28, 11, 18, 18, 13, 28, 5, 13]
mul = d1d79e7f bcb61f8b 970e91ab d749d96d 143d7339 2cde0d69 12d0a8c1 2d335be9 80a8aae9 7ac896c7 9de23db7 c362827d 5f4cdb5b fc6c5097 6f547f83 1ac31b47
rc = e5bef5a3 db2a7d90 cd1fa7e1 30289419 0a730d58 432f8579 6ab978a5 8c984f49 788c3c9e 051eef02 05e77db9 8b3cd4f3 6948d6cf 0d8677f6 f9505c8c 4513c163
keys = 8ff34781 2e2ac13a cc623af3 6a99b4ac 08d12e65 a708a81e 454021d7 e3779b90
sac: states=65536 wall=3.2s band(6 sigma)=0.01172
holes=1714 beyond6=91827 beyond8=86575 mean_flip=0.45695 worst in=25 (word 0) out=0 (word 0) p=1.00000 z=256.00
line index cells (out bits 0..21): worst z=256.00 beyond6=5694 of 11264
verdict: DISTINGUISHED

10
docs/analysis/cryptanalysis/logs/adv-mixer-3/sac-20733-weak-k8.log Normal file
View file

@ -0,0 +1,10 @@
adv-mixer-3 sac day=20733 apps=8 start=8 plant=Weak unix=1791398814
key = e23f9008 de33e763 c5ba415d 8ddf6786 59f4a4be 8a3bc680 701b8e40 3b59025a
rot = [16, 16, 16, 16, 16, 16, 16, 16]
mul = 00000001 00000001 00000001 00000001 00000001 00000001 00000001 00000001 00000001 00000001 00000001 00000001 00000001 00000001 00000001 00000001
rc = 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
keys = 8ff34781 2e2ac13a cc623af3 6a99b4ac 08d12e65 a708a81e 454021d7 e3779b90
sac: states=65536 wall=4.4s band(6 sigma)=0.01172
holes=0 beyond6=0 beyond8=0 mean_flip=0.50000 worst in=464 (word 14) out=167 (word 5) p=0.49042 z=-4.91
line index cells (out bits 0..21): worst z=-3.98 beyond6=0 of 11264
verdict: no cell beyond 6 sigma

10
docs/analysis/cryptanalysis/logs/adv-mixer-3/sac0-20729-k0.log Normal file
View file

@ -0,0 +1,10 @@
adv-mixer-3 sac0 day=20729 apps=0 start=0 plant=None unix=1791398988
key = 528b3e14 2e689968 ffc58df7 b7f348cb 8c15a789 703473e8 e58713af 0cfe196a
rot = [6, 25, 5, 25, 29, 11, 9, 21]
mul = addda577 e83ff665 a15aee9f 31ffb8cb e72c824d 225e647b 3ec0ace3 d1eb11d5 fa5c7dc5 40128acf 70bc55cf b823fa39 07fcdf49 56a6c8b1 c05d3115 02063ddd
rc = 0655b978 2c53cb31 e14235d3 30d45c30 5b07a13b 25271fad 418b165b f7fe03d7 67943b1d 5ba337a2 24aa3983 6abbbed4 12488b47 a4a81e53 96f96da0 b86823f8
keys =
sac0: states=65536 wall=0.1s band(6 sigma)=0.01172 inputs=32 t bits
holes=12439 beyond6=16132 mean_flip=0.13893 worst t-bit=0 out=0 (word 0) p=0.00000 z=-256.00
line index cells (out bits 0..21): worst z=-256.00 beyond6=704 of 704
verdict: DISTINGUISHED

10
docs/analysis/cryptanalysis/logs/adv-mixer-3/sac0-20729-k1.log Normal file
View file

@ -0,0 +1,10 @@
adv-mixer-3 sac0 day=20729 apps=1 start=0 plant=None unix=1791398988
key = 528b3e14 2e689968 ffc58df7 b7f348cb 8c15a789 703473e8 e58713af 0cfe196a
rot = [6, 25, 5, 25, 29, 11, 9, 21]
mul = addda577 e83ff665 a15aee9f 31ffb8cb e72c824d 225e647b 3ec0ace3 d1eb11d5 fa5c7dc5 40128acf 70bc55cf b823fa39 07fcdf49 56a6c8b1 c05d3115 02063ddd
rc = 0655b978 2c53cb31 e14235d3 30d45c30 5b07a13b 25271fad 418b165b f7fe03d7 67943b1d 5ba337a2 24aa3983 6abbbed4 12488b47 a4a81e53 96f96da0 b86823f8
keys = 9e3779b9
sac0: states=16777216 wall=16.7s band(6 sigma)=0.00073 inputs=32 t bits
holes=0 beyond6=218 mean_flip=0.49998 worst t-bit=31 out=53 (word 1) p=0.74269 z=1988.08
line index cells (out bits 0..21): worst z=1898.28 beyond6=18 of 704
verdict: DISTINGUISHED

6
docs/analysis/cryptanalysis/logs/adv-mixer-3/sac0-20729-k2-n28.log Normal file
View file

@ -0,0 +1,6 @@
adv-mixer-3 sac0 day=20729 apps=2 start=0 plant=None unix=1791399182
key = 528b3e14 2e689968 ffc58df7 b7f348cb 8c15a789 703473e8 e58713af 0cfe196a
rot = [6, 25, 5, 25, 29, 11, 9, 21]
mul = addda577 e83ff665 a15aee9f 31ffb8cb e72c824d 225e647b 3ec0ace3 d1eb11d5 fa5c7dc5 40128acf 70bc55cf b823fa39 07fcdf49 56a6c8b1 c05d3115 02063ddd
rc = 0655b978 2c53cb31 e14235d3 30d45c30 5b07a13b 25271fad 418b165b f7fe03d7 67943b1d 5ba337a2 24aa3983 6abbbed4 12488b47 a4a81e53 96f96da0 b86823f8
keys = 9e3779b9 3c6ef372

10
docs/analysis/cryptanalysis/logs/adv-mixer-3/sac0-20729-k2.log Normal file
View file

@ -0,0 +1,10 @@
adv-mixer-3 sac0 day=20729 apps=2 start=0 plant=None unix=1791399005
key = 528b3e14 2e689968 ffc58df7 b7f348cb 8c15a789 703473e8 e58713af 0cfe196a
rot = [6, 25, 5, 25, 29, 11, 9, 21]
mul = addda577 e83ff665 a15aee9f 31ffb8cb e72c824d 225e647b 3ec0ace3 d1eb11d5 fa5c7dc5 40128acf 70bc55cf b823fa39 07fcdf49 56a6c8b1 c05d3115 02063ddd
rc = 0655b978 2c53cb31 e14235d3 30d45c30 5b07a13b 25271fad 418b165b f7fe03d7 67943b1d 5ba337a2 24aa3983 6abbbed4 12488b47 a4a81e53 96f96da0 b86823f8
keys = 9e3779b9 3c6ef372
sac0: states=16777216 wall=19.3s band(6 sigma)=0.00073 inputs=32 t bits
holes=0 beyond6=0 mean_flip=0.50000 worst t-bit=23 out=147 (word 4) p=0.49949 z=-4.19
line index cells (out bits 0..21): worst z=-3.25 beyond6=0 of 704
verdict: no cell beyond 6 sigma

10
docs/analysis/cryptanalysis/logs/adv-mixer-3/sac0-20729-k3.log Normal file
View file

@ -0,0 +1,10 @@
adv-mixer-3 sac0 day=20729 apps=3 start=0 plant=None unix=1791399024
key = 528b3e14 2e689968 ffc58df7 b7f348cb 8c15a789 703473e8 e58713af 0cfe196a
rot = [6, 25, 5, 25, 29, 11, 9, 21]
mul = addda577 e83ff665 a15aee9f 31ffb8cb e72c824d 225e647b 3ec0ace3 d1eb11d5 fa5c7dc5 40128acf 70bc55cf b823fa39 07fcdf49 56a6c8b1 c05d3115 02063ddd
rc = 0655b978 2c53cb31 e14235d3 30d45c30 5b07a13b 25271fad 418b165b f7fe03d7 67943b1d 5ba337a2 24aa3983 6abbbed4 12488b47 a4a81e53 96f96da0 b86823f8
keys = 9e3779b9 3c6ef372 daa66d2b
sac0: states=16777216 wall=23.3s band(6 sigma)=0.00073 inputs=32 t bits
holes=0 beyond6=0 mean_flip=0.50000 worst t-bit=26 out=219 (word 6) p=0.49955 z=-3.73
line index cells (out bits 0..21): worst z=3.11 beyond6=0 of 704
verdict: no cell beyond 6 sigma

10
docs/analysis/cryptanalysis/logs/adv-mixer-3/sac0-20729-k4.log Normal file
View file

@ -0,0 +1,10 @@
adv-mixer-3 sac0 day=20729 apps=4 start=0 plant=None unix=1791399048
key = 528b3e14 2e689968 ffc58df7 b7f348cb 8c15a789 703473e8 e58713af 0cfe196a
rot = [6, 25, 5, 25, 29, 11, 9, 21]
mul = addda577 e83ff665 a15aee9f 31ffb8cb e72c824d 225e647b 3ec0ace3 d1eb11d5 fa5c7dc5 40128acf 70bc55cf b823fa39 07fcdf49 56a6c8b1 c05d3115 02063ddd
rc = 0655b978 2c53cb31 e14235d3 30d45c30 5b07a13b 25271fad 418b165b f7fe03d7 67943b1d 5ba337a2 24aa3983 6abbbed4 12488b47 a4a81e53 96f96da0 b86823f8
keys = 9e3779b9 3c6ef372 daa66d2b 78dde6e4
sac0: states=16777216 wall=33.5s band(6 sigma)=0.00073 inputs=32 t bits
holes=0 beyond6=0 mean_flip=0.50000 worst t-bit=30 out=329 (word 10) p=0.50051 z=4.15
line index cells (out bits 0..21): worst z=-3.72 beyond6=0 of 704
verdict: no cell beyond 6 sigma

10
docs/analysis/cryptanalysis/logs/adv-mixer-3/sac0-20729-k5.log Normal file
View file

@ -0,0 +1,10 @@
adv-mixer-3 sac0 day=20729 apps=5 start=0 plant=None unix=1791399081
key = 528b3e14 2e689968 ffc58df7 b7f348cb 8c15a789 703473e8 e58713af 0cfe196a
rot = [6, 25, 5, 25, 29, 11, 9, 21]
mul = addda577 e83ff665 a15aee9f 31ffb8cb e72c824d 225e647b 3ec0ace3 d1eb11d5 fa5c7dc5 40128acf 70bc55cf b823fa39 07fcdf49 56a6c8b1 c05d3115 02063ddd
rc = 0655b978 2c53cb31 e14235d3 30d45c30 5b07a13b 25271fad 418b165b f7fe03d7 67943b1d 5ba337a2 24aa3983 6abbbed4 12488b47 a4a81e53 96f96da0 b86823f8
keys = 9e3779b9 3c6ef372 daa66d2b 78dde6e4 1715609d
sac0: states=16777216 wall=30.4s band(6 sigma)=0.00073 inputs=32 t bits
holes=0 beyond6=0 mean_flip=0.50000 worst t-bit=31 out=162 (word 5) p=0.49947 z=-4.32
line index cells (out bits 0..21): worst z=3.79 beyond6=0 of 704
verdict: no cell beyond 6 sigma

10
docs/analysis/cryptanalysis/logs/adv-mixer-3/sac0-20729-k6.log Normal file
View file

@ -0,0 +1,10 @@
adv-mixer-3 sac0 day=20729 apps=6 start=0 plant=None unix=1791399112
key = 528b3e14 2e689968 ffc58df7 b7f348cb 8c15a789 703473e8 e58713af 0cfe196a
rot = [6, 25, 5, 25, 29, 11, 9, 21]
mul = addda577 e83ff665 a15aee9f 31ffb8cb e72c824d 225e647b 3ec0ace3 d1eb11d5 fa5c7dc5 40128acf 70bc55cf b823fa39 07fcdf49 56a6c8b1 c05d3115 02063ddd
rc = 0655b978 2c53cb31 e14235d3 30d45c30 5b07a13b 25271fad 418b165b f7fe03d7 67943b1d 5ba337a2 24aa3983 6abbbed4 12488b47 a4a81e53 96f96da0 b86823f8
keys = 9e3779b9 3c6ef372 daa66d2b 78dde6e4 1715609d b54cda56
sac0: states=16777216 wall=22.5s band(6 sigma)=0.00073 inputs=32 t bits
holes=0 beyond6=0 mean_flip=0.50000 worst t-bit=26 out=194 (word 6) p=0.50050 z=4.08
line index cells (out bits 0..21): worst z=3.32 beyond6=0 of 704
verdict: no cell beyond 6 sigma

10
docs/analysis/cryptanalysis/logs/adv-mixer-3/sac0-20729-k7.log Normal file
View file

@ -0,0 +1,10 @@
adv-mixer-3 sac0 day=20729 apps=7 start=0 plant=None unix=1791399134
key = 528b3e14 2e689968 ffc58df7 b7f348cb 8c15a789 703473e8 e58713af 0cfe196a
rot = [6, 25, 5, 25, 29, 11, 9, 21]
mul = addda577 e83ff665 a15aee9f 31ffb8cb e72c824d 225e647b 3ec0ace3 d1eb11d5 fa5c7dc5 40128acf 70bc55cf b823fa39 07fcdf49 56a6c8b1 c05d3115 02063ddd
rc = 0655b978 2c53cb31 e14235d3 30d45c30 5b07a13b 25271fad 418b165b f7fe03d7 67943b1d 5ba337a2 24aa3983 6abbbed4 12488b47 a4a81e53 96f96da0 b86823f8
keys = 9e3779b9 3c6ef372 daa66d2b 78dde6e4 1715609d b54cda56 5384540f
sac0: states=16777216 wall=20.8s band(6 sigma)=0.00073 inputs=32 t bits
holes=0 beyond6=0 mean_flip=0.50000 worst t-bit=6 out=390 (word 12) p=0.49943 z=-4.69
line index cells (out bits 0..21): worst z=4.24 beyond6=0 of 704
verdict: no cell beyond 6 sigma

10
docs/analysis/cryptanalysis/logs/adv-mixer-3/sac0-20729-k8.log Normal file
View file

@ -0,0 +1,10 @@
adv-mixer-3 sac0 day=20729 apps=8 start=0 plant=None unix=1791399155
key = 528b3e14 2e689968 ffc58df7 b7f348cb 8c15a789 703473e8 e58713af 0cfe196a
rot = [6, 25, 5, 25, 29, 11, 9, 21]
mul = addda577 e83ff665 a15aee9f 31ffb8cb e72c824d 225e647b 3ec0ace3 d1eb11d5 fa5c7dc5 40128acf 70bc55cf b823fa39 07fcdf49 56a6c8b1 c05d3115 02063ddd
rc = 0655b978 2c53cb31 e14235d3 30d45c30 5b07a13b 25271fad 418b165b f7fe03d7 67943b1d 5ba337a2 24aa3983 6abbbed4 12488b47 a4a81e53 96f96da0 b86823f8
keys = 9e3779b9 3c6ef372 daa66d2b 78dde6e4 1715609d b54cda56 5384540f f1bbcdc8
sac0: states=16777216 wall=26.7s band(6 sigma)=0.00073 inputs=32 t bits
holes=0 beyond6=0 mean_flip=0.50000 worst t-bit=13 out=9 (word 0) p=0.49947 z=-4.33
line index cells (out bits 0..21): worst z=-4.33 beyond6=0 of 704
verdict: no cell beyond 6 sigma

0
docs/analysis/cryptanalysis/logs/adv-mixer-3/sat-20729-k1.log Normal file
View file

2888
docs/analysis/cryptanalysis/logs/adv-mixer-3/sat-smoke-k1.log Normal file
View file

File diff suppressed because it is too large Load diff

43
docs/analysis/cryptanalysis/report-mixer-3.md
View file

@ -24,11 +24,11 @@ Plant rule: a tool is trusted once it has fired on a known-failed shape. Which s
| Q | Method | Known-failed shape | Gate | Result (numbers) | Status |
|---|---|---|---|---|---|
| Q1 | exhaustive round-0 line-index census, all 2^32 t, k = 0..8 | k = 0 (the init: one bin holds 2^32, fired on both days) | chi-square z within 6, no empty bin | day 20729: uniform at k = 1 (z -1.13), 2 (z -0.68), 3 (z -0.39); later k below | RUNNING |
| Q1 | exhaustive round-0 line-index census, all 2^32 t, k = 0..8 | k = 0 (the init: one bin holds 2^32, fired on both days) | chi-square z within 6, no empty bin | day 20729: uniform at k = 1 (z -1.13), 2 (-0.68), 3 (-0.39), 4 (-0.47); day 20733 uniform at k = 1 (z -0.71); k = 5..8 running | PASS to k = 4 (BOUND: the index histogram is uniform from k = 1), RUNNING |
| Q2 | single-bit avalanche, random states, 2^24 (and 2^27) states | `one` at k = 8 (fired: 1959 holes); `weak` fires at k = 1 only, not at k = 8 (see Q2) | no cell beyond 6 sigma | k = 1: 354 holes, 129,726 cells beyond 6 sigma, worst p = 1.000 | RUNNING |
| Q2b | t-bit avalanche on the round-0 input (32 bits in), 2^24 (and 2^28) states | k = 0 (the init alone, fired: 12,439 holes) | no cell beyond 6 sigma | k = 1: 0 holes, 218 cells beyond 6 sigma, worst p = 0.7427 (t bit 31 to state bit 53), 18 line-index cells beyond 6 sigma | RUNNING |
| Q3 | differential multiplicity, 576 low-weight input differences, 2^20 pairs each | `nomul` at k = 1 (fired: 17,289 deterministic output bits at 4,096 pairs) | no multiplicity 4 or more, no deterministic bit | pending the k = 1..4 rows | RUNNING |
| Q4 | single-bit linear correlations, random states, 2^26 samples | k = 0 (the identity, fired: c = 1.0 on the diagonal) | no cell beyond 6 sigma (band 0.00073) | k = 1: worst c = -0.00056 (z -4.61); k = 2: 0.00058; k = 3: 0.00056; k = 4: -0.00056: all inside the band | PASS to k = 4 (BOUND), RUNNING to k = 8 |
| Q2b | t-bit avalanche on the round-0 input (32 bits in), 2^24 (and 2^28) states | k = 0 (the init alone, fired: 12,439 holes) | no cell beyond 6 sigma | k = 1: 0 holes, 218 cells beyond 6 sigma, worst p = 0.7427 (t bit 31 to state bit 53), 18 line-index cells beyond 6 sigma. k = 2..8 at 2^24: 0 cells beyond 6 sigma, worst z 3.7 to 4.7 (the maximum of 16,384 normals is about 4.1). 2^28 rows at k = 2, 3, 4 running | FINDING at k = 1, PASS from k = 2 (margin: 1 of 8) |
| Q3 | differential multiplicity, 576 low-weight input differences, 2^20 pairs each | `nomul` at k = 1 (fired: 17,289 deterministic output bits at 4,096 pairs) | no multiplicity 4 or more, no deterministic bit | k = 1: 695 deterministic output bits over the 576 differences (max 35 in one difference) on day 20729, 537 (max 40) on 20733; k = 2..7: 0 deterministic bits, max multiplicity 1, no pair with 2 zero words, both days; k = 8 running | FINDING at k = 1 (deterministic bits), PASS from k = 2 |
| Q4 | single-bit linear correlations, random states, 2^26 samples | k = 0 (the identity, fired: c = 1.0 on the diagonal) | no cell beyond 6 sigma (band 0.00073) | k = 1..6: worst c between 0.00055 and 0.00058 (z 4.5 to 4.7, the expected maximum of 262,144 normals is 4.8), 0 cells beyond 6 sigma; k = 7, 8 running | PASS from k = 1 (BOUND) |
| Q4b | t-bit linear correlations on the round-0 input, 2^26 samples | k = 0 | no cell beyond 6 sigma | pending | RUNNING |
| Q5 | rotational-XOR, rotations 1, 8, 16, 2^22 samples | `weak0` at k = 1 | no zero-difference word above 2 of N, no repeated difference above 3 | pending | RUNNING |
| Q6 | SAT (CaDiCaL) on the round-0 input: find t with a given 22-bit index after k applications | k = 1 solved and verified | solve inside one hour per k, time against the honest 2^10 x k x 130 ops | k = 1: SATISFIABLE in 137 s wall (loaded box); model t = 0x49880000 verifies to the target 0x20eb79. Honest: 2^10 trials of one application is under a millisecond. The solver is already slower than brute force at k = 1 | PASS at k = 1 (BOUND); k = 2..4 RUNNING |
@ -51,6 +51,9 @@ Command (build-1), per k: `adv-mixer-3 index --day 20729 --apps k --threads 64`.
| 20729 | 1 | -1.13 | 0 | 871 | 1191 | -2.00 | -0.26 | pending | uniform within the band |
| 20729 | 2 | -0.68 | 0 | 874 | 1191 | 0.56 | -0.14 | pending | uniform |
| 20729 | 3 | -0.39 | 0 | 853 | 1187 | -0.03 | -1.15 | pending | uniform |
| 20729 | 4 | -0.47 | 0 | 857 | 1190 | 1.07 | -0.25 | pending | uniform |
| 20733 | 0 | 6.2e12 | 4194303 | 0 | 2^32 | 7.8e11 | 2.4e10 | n/a | NON-UNIFORM (plant) |
| 20733 | 1 | -0.71 | 0 | 863 | 1202 | 0.11 | -0.60 | pending | uniform |
Reading: after one application the 2^32 round-0 inputs already spread over the 2^22 lines as a uniform draw
would (Poisson 1024 per bin: min 871, max 1191 are the expected extremes over 4 million bins). The multiply layer
@ -80,12 +83,40 @@ Logs: sac0-20729-k<k>.log. Plant k = 0 (the init alone) fired: 12,439 holes of 1
| Day | k | states | holes | cells beyond 6 sigma (of 16,384) | worst cell | worst p | line-index cells beyond 6 sigma (of 704) | verdict |
|---|---|---|---|---|---|---|---|---|
| 20729 | 1 | 2^24 | 0 | 218 | t bit 31 to state bit 53 (word 1) | 0.7427 | 18 | DISTINGUISHED |
| 20729 | 2 | 2^24 | 0 | 0 | t bit 23 to bit 147 | 0.49949 (z -4.19) | 0 | inside the band |
| 20729 | 3 | 2^24 | 0 | 0 | t bit 26 to bit 219 | 0.49955 (z -3.73) | 0 | inside |
| 20729 | 4 | 2^24 | 0 | 0 | t bit 30 to bit 329 | 0.50051 (z 4.15) | 0 | inside |
| 20729 | 5 | 2^24 | 0 | 0 | t bit 31 to bit 162 | 0.49947 (z -4.32) | 0 | inside |
| 20729 | 6 | 2^24 | 0 | 0 | t bit 26 to bit 194 | 0.50050 (z 4.08) | 0 | inside |
| 20729 | 7 | 2^24 | 0 | 0 | t bit 6 to bit 390 | 0.49943 (z -4.69) | 0 | inside |
| 20729 | 8 | 2^24 | 0 | 0 | t bit 13 to bit 9 | 0.49947 (z -4.33) | 0 | inside |
Reading: on the real input of round 0 (one 32-bit t), one application leaves a 24 percent bias on 218 of the
16,384 (t bit, state bit) cells and on 18 of the 704 cells that feed the first line index. Two applications leave
nothing at 2^24 states (band 0.0015). The margin on this statistic is 1 of the 8 applications before the first
read: the first read's address is not predictable from t after 2 of its 8 applications, at this band.
## Q3: differential multiplicity
Command (build-1), per k: `adv-mixer-3 diff --day 20729 --apps k --start 8 --samples 2^20 --threads 64`.
576 input differences (512 single bits, 64 random two-bit), 2^20 random pairs each, the 512-bit output difference
hashed to 64 bits; the band for one output difference is 2^-19 (multiplicity 2 or more). Plant `nomul` at k = 1
fired: 7,992 deterministic output bits (day 20729), 7,189 (day 20733). Logs: diff-<day>-k<k>.log.
Rows land here.
| Day | k | max multiplicity of one output difference | deterministic output bits (all 576 differences) | max in one difference | pairs with 2 or more zero output words | verdict |
|---|---|---|---|---|---|---|
| 20729 | 1 | 1 | 695 | 35 of 512 | 0 | DISTINGUISHED (deterministic bits) |
| 20729 | 2 | 1 | 0 | 0 | 0 | inside the band |
| 20729 | 3 to 7 | 1 | 0 | 0 | 0 | inside |
| 20733 | 1 | 1 | 537 | 40 of 512 | 0 | DISTINGUISHED (deterministic bits) |
| 20733 | 2 to 7 | 1 | 0 | 0 | 0 | inside |
Reading: at k = 1 a single-bit input difference fixes 35 to 40 output bits (the quarter-round structure: the
first add and XOR of a column pass a flipped bit on deterministically before the rotations spread it), but no
full output difference repeats even once in 2^20 pairs, because the other 470 bits of the difference are
spread. At k = 2 no output bit is fixed by any of the 576 input differences. Differentials of probability above
2^-19 do not exist for these input differences past k = 1. The truncated form (whole output words unchanged)
never beats the random rate at any k.
## Q4: single-bit linear correlations
@ -98,6 +129,8 @@ Band: 6 sigma = 0.00073. Plant k = 0 fired (c = 1.0 on the 512 diagonal cells).
| 20729 | 2 | 2^26 | 0.00058 | 4.73 | 0 | 4.09 | 3.47 | inside |
| 20729 | 3 | 2^26 | 0.00056 | 4.61 | 0 | -3.95 | 3.17 | inside |
| 20729 | 4 | 2^26 | -0.00056 | -4.61 | 0 | 4.18 | 3.08 | inside |
| 20729 | 5 | 2^26 | 0.00057 | 4.64 | 0 | 4.14 | 3.27 | inside |
| 20729 | 6 | 2^26 | -0.00055 | -4.54 | 0 | pending | pending | inside |
Reading: a single input bit and a single output bit have no measurable linear correlation after one application
on random states. The worst z of 4.6 to 4.7 over 262,144 cells is what 262,144 draws of a standard normal give