Post #3025954

Our paper https://ia.cr/2026/913 shows how to find affine maps agreeing with an S-box on as many as possible inputs. Look for presentation at #Eurocrypt 2026 today! The code is already available. Also check out a vide-coded interactive tool, it's fun to play with: https://affine.group/pages/greedy-extension