“…After one-round decryption, the difference for the input of the 17th round is ΔL 17 � 0, ΔR 17 � 0. As the differences for subkey RK 16 to RK 9 are all zeros, the difference for the input of the 9th round ΔL 9 � 0, ΔR 9 � 0. e subkey RK 8 will bring in a new difference in RK 8 [21] ; thus the difference for the input of the 8th round is ΔL 8 � 0, ΔR 8 � (0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0).…”