pub fn sbox_full_audit(sbox: &[u32], out_bits: usize) -> Option<SboxVerdict>Expand description
Audit an S-box with the full structural arsenal — differential, linear, algebraic, and boomerang — and
return the first provable weakness, else the honest ceiling with the measured profile. None if the
table length is not a power of two. Threshold-free: it never fabricates a “weak” verdict from an
arbitrary cutoff, only from a structure that is exact.