# DF-2367 leak sample: 160 T-table index bytes consumed per AES-128 block
# (fixed plaintext 00112233...eeff; traces produced by the REAL kernel key
#  schedule + the twin round loop, twin==real ct verified for every trace)
# round-1 16 indices are plaintext XOR key bytes -> the cache-line observable

K    (baseline key) key=000102030405060708090a0b0c0d0e0f
  round1 indices : 0050a0f04090e03080d02070c01060b0
  Te0 line (idx0): table+0x000 -> cache line 0 of 16
  full trace     : 0050a0f04090e03080d02070c01060b0895a43e485188fe82d121068cbd8ced849e594f755ca638fda0a59a01f15d7fafab38a1725664d2840246ac9576339312466756c69d25b236e4240fa8872b332c87a79969b0219bc2526773bb016c992c65e395df779cf09ccf9e1c3842fed5dd1c4941f7955f40fb46f6c0ad68730adfde596f1054737d235febad7f1e3d04ebdb52189f261b63d0b107c9e8b6e776e

K'   (key byte0  00->80) key=800102030405060708090a0b0c0d0e0f
  round1 indices : 8050a0f04090e03080d02070c01060b0
  Te0 line (idx0): table+0x200 -> cache line 8 of 16
  full trace     : 8050a0f04090e03080d02070c01060b04e5a43e405188f01ad12be684b76ced8c2fe1106512b964ba414d12db79d190e47f25d66c065f0810db0a9cbd045f14c639e73f0ad17b1a3b270fe4827b1ded4f3b852a06deac43e18de3463044980402c11abd1b3114c8e1e62b8657c04dc960b4f9d59a8ce0b46644790a27507e1d42fba42c3ccda114cc7a647a36b1c9485eed44a44a1a29239d4816c32df6bba5d

K''  (key byte15 0f->ff) key=000102030405060708090a0b0c0d0eff
  round1 indices : 0050a0004090e03080d02070c01060b0
  Te0 line (idx0): table+0x000 -> cache line 0 of 16
  full trace     : 0050a0004090e03080d02070c01060b0665a23148518ef2d2d125a68cb37aed8d5360c93ba295629ae296b8a6629418e1d6d31f0410b0f13caeb8afd8c2b65aec909f463ac11fe1ec9da5e97c69ca6b2f13b8924bd788d47735793b34dd4b1af02276062f139fd99854485ba3cd2178ebb37762492451046e0371d7bf3ec5a869cfe8e3213d8331add683f328e694dec6ada670db6ae43a0ba2696b49250d548

K vs K' : round-1 differing positions [0] (exactly the flipped key byte); total 136/160 after avalanche