In this paper, the best linear approximation (BLA) is extended to include second-order nonlinearities. This extension is particularly useful for the analysis of low-frequency (LF) distortion due to ...

A theoretical framework for the use of multiple linear approximations in the linear cryptanalysis of block ciphers is given. The covariance of two mask counts is derived, and it is shown that under ...