Research Article
Cryptanalysis of the Lightweight Block Cipher BORON
Algorithm 9
Finding linear trails with the optimal bias.
r: the number of rounds | : the expected bias of the whole trail | (1) | for to 15 do | (2) | for to 15 do | (3) | | (4) | end for | (5) | end for | (6) | | (7) | for to r do | (8) | for to 15 do | (9) | bias_i_j | (10) | = linear_dist[before_sbox_mask_i_j][after_sbox_mask_i_j] | (11) | end for | (12) | end for | (13) | | (14) | | (15) | | (16) | |
|