Biclique Cryptanalysis on the Full Crypton-256 and mCrypton-128

Table 3

Indices of expanded keys 𝐸_𝑒[𝑖] of Crypton-256 associated with each round.

Round	i
0	0, 1, 2, 3
1	4, 5, 6, 7
2	1, 2, 3, 0
3	7, 4, 5, 6
4	2, 3, 0, 1
5	6, 7, 4, 5
6	3, 0, 1, 2
7	5, 6, 7, 4
8	0, 1, 2, 3
9	4*, 5*, 6*, 7*
10	1*, 2*, 3*, 0*
11	7, 4, 5, 6
12	2, 3, 0, 1

Note: the * represents key space.