From Simple Mathematical Upper Bounds to Tight Tool-based Bounds for the Minimum Number of Active S-boxes in LS-Designs
LS-designs, proposed at FSE 2014, are a conceptually simple family of block ciphers, where a bitslice S-box and a linear L-box are independently applied to the state. They are known for enabling efficiently masked implementations against side-channel attacks. In this paper, we consolidate the understanding of their sec...