Security Cryptanalysis of NUX for the Internet of Things

Table 9

Minimal number of active S-boxes from linear approximation.

Number of active S-boxes
Reference	Rounds
	1	2	3	4	5
[12]	0	1	4	9	13
Section 4.1	0	1	2	3	3