Related-Key Differential Attacks on Reduced-Round LBlock

Table 1

Summary of lower bounds on the minimal number of active S-boxes or upper bound on probability in related-key differential characteristics for reduced-round LBlock (bounds are measured by the number of active S-boxes or total probability).

Objective function	Rounds	Bounds	Reference
Active S-boxes	11	10	[16]
Active S-boxes	13	26	[5]
Active S-boxes	15	23	[17]
Active S-boxes	19		Section 3
Total probability	19		Section 3