
Settling Conjectures on Linear Structures of Inverse ChiChi Generalizations Four Proofs and a Counterexample
An IACR eprint paper proving four of five open conjectures, and disproving the fifth with a counterexample, from Andreoli and colleagues at ToSC 2025 about the linear height and component linear nullity of the inverse of ChiChi, the low latency nonlinear core used in the ChiLow cipher from Eurocrypt 2025 by Belkheyar and colleagues. The authors settle these bounds for all admissible branch lengths of the SWAP and 4-cycle generalizations, derive design consequences for ChiLow, and correct an erroneous data value from the prior work.
TL;DR Settles all five linear structure conjectures on ChiChi inverse, with design implications for the ChiLow lightweight cipher.
Organisations named here
- SWAP
Technologies named here
- ChiChi
- ChiLow
- SWAP family
- 4-cycle family
Techniques named here
- Linear cryptanalysis
Related in other

Rerandomizable Garbling for Arithmetic Circuits

