Now consider the case when two round subkeys are repeated without order change in the last encryption rounds. (Note that they do change the order in the original Magma description.) There are 264 such combinations for different key pairs in the space of 2256 possible values. Thus, exhaustive
search of all combination is 264 iterations, or, just 232 if slide attack is applied.