Cryptanalysis of the Lightweight Block Cipher BORON

Table 4

Differential trails with the optimal probability.

Round	Input difference of S-box	Output difference of S-box
3-round differential trail with probability
0	0x0000000800000200	0x0000000C00000300
1	0x0000000000000006	0x0000000000000008
2	0x1000100000001000	0xA000A0000000A000
3	0x1141514040014141	—
4-round differential trail with probability
0	0xA0000009000F0000	0x4000000100080000
1	0x0000800000000000	0x0000C00000000000
2	0x6000600000000000	0x2000800000000000
3	0x0000400040004000	0x0000900090007000
4	0x48E048E0090009E0	—
5-round differential trail with probability
0	0x0000002009000F00	0x0000003001000800
1	0x0008000800100000	0x0003000C00600000
2	0x0000000600000000	0x0000000E00000000
3	0x0007000700000000	0x0001000400000000
4	0x0000000200020002	0x00000003000B0005
5	0x8A018A01B000BA00	—
6-round differential trail with probability
0	0x09000A0030080000	0x01000400200C0000
1	0x00000200C000C000	0x0000030010008000
2	0x0080008001000000	0x003000C006000000
3	0x0000006000000000	0x000000C000000000
4	0x0060006000000000	0x0020008000000000
5	0x0000004000400040	0x0000009000700090
6	0x2049204900072006	—
7-round differential trail with probability
0	0xB000A00000230000	0x1000400000520000
1	0x0000200000050005	0x0000300000010008
2	0x0800080010000000	0x03000C0060000000
3	0x0000060000000000	0x00000A0000000000
4	0x0500050000000000	0x03000C0000000000
5	0x0000060006000600	0x0000080008000800
6	0x0410041000800090	0x07A007A000F00010
7	0x2C9023D00F4F2F4F	—
8-round differential trail with probability
0	0x0000080000100000	0x00000C0000F00000
1	0x06000600000F000F	0x08000E00000E0008
2	0x07001700F000E000	0x0400F10080004000
3	0x7000780000000080	0x60001C0000000060
4	0x0E00CE00C0000000	0x06001800C0000000
5	0x00000C0000000000	0x0000010000000000
6	0x0080008000000000	0x003000C000000000
7	0x0000006000600060	0x0000008000800080
8	0x0041004100080009	—