Overestimates for the Gain of Multiple Linear Approximations in Symmetric Cryptology
This paper shows that Corollary 1 of "On Multiple Linear Approximations" is incorrect. In particular, the value given for the gain by Corollary 1 is likely to be a significant overestimate of this quantity. Thus, any data requirements for linear cryptanalysis with multiple linear approximations based on this value for the gain are highly questionable.
gain multiple linear approximations linear cryptanalysis jensen's inequality