FIX/Fix: SBox deterministic truncated constraints

Crypto-TII · Oct 28, 2024 · fafbd3a · fafbd3a
1 parent 6ae63d5
commit fafbd3a
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 4 deletions.
diff --git a/...cipher_modules/models/cp/mzn_models/mzn_deterministic_truncated_xor_differential_model.py b/...cipher_modules/models/cp/mzn_models/mzn_deterministic_truncated_xor_differential_model.py
@@ -435,10 +435,10 @@ def output_inverse_constraints(self, component):
 
         return cp_declarations, cp_constraints
 
-    def propagate_deterministically(self, component, wordwise=False):
+    def propagate_deterministically(self, component, wordwise=False, inverse=False):
         if not wordwise:
             if component.type == SBOX:
-                variables, constraints, sbox_mant = component.cp_deterministic_truncated_xor_differential_trail_constraints(self.sbox_mant)
+                variables, constraints, sbox_mant = component.cp_deterministic_truncated_xor_differential_trail_constraints(self.sbox_mant, inverse)
                 self.sbox_mant = sbox_mant
             else:
                 variables, constraints = component.cp_deterministic_truncated_xor_differential_trail_constraints()

diff --git a/claasp/cipher_modules/models/cp/mzn_models/mzn_impossible_xor_differential_model.py b/claasp/cipher_modules/models/cp/mzn_models/mzn_impossible_xor_differential_model.py
@@ -65,7 +65,7 @@ def build_impossible_backward_model(self, backward_components, clean = True):
         constant_components, constant_ids = self.extract_constants()
         for component in backward_components:
             if check_if_implemented_component(component):
-                variables, constraints = self.propagate_deterministically(component)
+                variables, constraints = self.propagate_deterministically(component, inverse=True)
                 inverse_variables.extend(variables)
                 inverse_constraints.extend(constraints)
 
@@ -924,4 +924,4 @@ def solve(self, model_type, solver_name=None, number_of_rounds=None, initial_rou
                               'impossible_xor_differential_one_solution']:
                 return solutions[0]
             else:
-                return solutions
+                return solutions