Table A4.

Difference distribution table (DDT) of 4-bit S-Box${}^2$.

I/O	0	1	2	3	4	5	6	7	8	9	A	B	C	D	E	F
0	16	0	0	0	0	0	0	0	0	0	0	0	0	0	0	0
1	0	2	2	2	0	2	0	0	0	2	0	0	0	2	2	2
2	0	2	4	2	0	0	0	0	2	0	2	0	0	0	4	0
3	0	2	0	4	0	0	2	0	0	0	0	2	2	4	0	0
4	0	0	2	0	2	0	2	2	2	0	2	2	0	0	2	0
5	0	0	0	0	0	6	0	2	2	0	2	4	0	0	0	0
6	0	2	0	0	2	0	4	0	4	2	0	0	2	0	0	0
7	0	0	0	0	0	0	0	0	2	4	2	4	0	2	0	2
8	0	4	0	2	2	0	0	0	0	0	0	2	2	0	0	4
9	0	0	4	0	2	0	2	0	0	0	0	0	0	2	4	2
A	0	2	2	2	0	2	0	0	0	2	0	0	0	2	2	2
B	0	0	0	0	0	0	0	0	2	0	2	0	8	2	0	2
C	0	2	0	2	2	4	2	4	0	0	0	0	0	0	0	0
D	0	0	0	2	4	0	2	0	0	2	4	0	2	0	0	0
E	0	0	0	0	0	2	0	6	0	4	0	0	0	2	0	2
F	0	0	2	0	2	0	2	2	2	0	2	2	0	0	2	0