The TBox do not mix

[WMHbear]

In your code, the TBox do not mix ,so we can get key in TBox.
It is not whitebox aes.

[balena]

I've created another implementation in https://github.com/balena/aes-whitebox . It contains L × MB bijection protections as originally specified in Muir's paper.

[balena]

If you look at the genTables.cpp file at line 159, you will see the problem. Basically before applying the L affine conversion you have to consider the shiftRows of the next round.

I think @Gr1zz had given up trying to apply it and eventually gave up eliminating this transformation by adding the code in line genTables.cpp:123. And it also missed to revert the L function in genTables.cpp:105.

[WMHbear]

I've created another implementation in https://github.com/balena/aes-whitebox . It contains L × MB bijection protections as originally specified in Muir's paper.

Good Job!