%I #17 Jun 28 2026 15:47:53
%S 1,0,8,27,55,240,701,1909,5753,15747,41138,104762,252664,580609,
%T 1274691,2665295,5315469,10113564,18353698,31781680,52486460,82606895,
%U 123821091,176518711,238906435,306378988,371328696,423932616
%N Weight distribution of a certain binary linear code of length 56 defined by AES (or Rijndael) S-box.
%C This is the code of length 56 defined by taking a slice of four bytes and three bytes of successive AES round keys as described in the Halderman et al. paper.
%H Nadia Heninger, <a href="/A131620/b131620.txt">Table of n, a(n) for n = 0..56</a> [The full weight distribution]
%H J. Alex Halderman, Seth D. Schoen, Nadia Heninger, William Clarkson, William Paul, Joseph A. Calandrino, Ariel J. Feldman, Jacob Appelbaum and Edward W. Felten, <a href="http://citp.princeton.edu/memory/">Lest We Remember: Cold Boot Attacks on Encryption Keys</a>, 2008.
%H Wikipedia, <a href="https://en.wikipedia.org/wiki/Rijndael_S-box">Rijndael S-box</a>
%Y Cf. A131630.
%K nonn,fini,full,changed
%O 0,3
%A _Nadia Heninger_, May 28 2008