The paper claims that the probability of truncated differentials is NUMBER@1 NUMBER@2 per block and that it will take roughly NUMBER@3 chosen plaintexts -LRB- NUMBER@4 PiB worth of data -RRB- to find a good pair of truncated differentials .

The paper claims that the probability of truncated differentials attacks is NUMBER@1 NUMBER@2 per block and that it will take about NUMBER@3 chosen plaintexts -LRB- NUMBER@4 PiB worth of data -RRB- to find a good pair of truncated differentials .
