expanded into lower degree attacks according to the increasing powers of the signal-to-
noise ratio (SNR). By exploiting this decomposition we show that it is possible to build highly
multivariate attacks which remain efficient when the likelihood cannot be computed in
practice due to its computational complexity. The shuffled table recomputation is used as an
illustration to derive a new attack which outperforms the ones presented by Bruneau et al. at …