Cryptanalysis of the Lightweight Block Cipher BORON

Table 2

Minimal number of active S-boxes.

Round	Differential trails	Linear trails
3	6	6
4	9	9
5	12	11
6	16	14
7	21	17
8	24	19
9	27	22
10	31	25