Loading CryptoViz...
Loading page content...Cryptanalysis
Explore how linear approximations can reveal statistical bias in a tiny toy cipher. Choose masks, inspect plaintext/ciphertext pairs, and see whether the relation holds more often than chance.
Toy cipher only
This page uses a 4-bit educational S-box. It does not attack real systems and does not implement production cryptanalysis tooling.
A random relation should hold about 50% of the time. A larger distance from 50% means a stronger toy-cipher linear bias.
Matches
8
Misses
8
Probability
50.0%
Bias strength
weak
Explanation
Linear cryptanalysis looks for linear relations between selected plaintext bits, ciphertext bits, and key-dependent intermediate bits that hold with probability noticeably different from 50%.
bias = 0.000
| # | Plain | Cipher | Plain parity | Cipher parity | Relation |
|---|---|---|---|---|---|
| 1 | 0 | 3 | 0 | 0 | holds |
| 2 | 1 | D | 1 | 0 | misses |
| 3 | 2 | 1 | 0 | 1 | misses |
| 4 | 3 | F | 1 | 1 | holds |
| 5 | 4 | 9 | 1 | 1 | holds |
| 6 | 5 | B | 0 | 0 | holds |
| 7 | 6 | 8 | 1 | 0 | misses |
| 8 | 7 | A | 0 | 1 | misses |
| 9 | 8 | C | 0 | 1 | misses |
| 10 | 9 | 5 | 1 | 0 | misses |
| 11 | A | 6 | 0 | 0 | holds |
| 12 | B | 4 | 1 | 1 | holds |
| 13 | C | 2 | 1 | 1 | holds |
| 14 | D | E | 0 | 0 | holds |
| 15 | E | 0 | 1 | 0 | misses |
| 16 | F | 7 | 0 | 1 | misses |