Related-Key Differential Attacks on Reduced-Round LBlock

Table 12

Related-key differential attack process on 22-round LBlock.

Step	Subkey	Masterkey	#Bits	Time	#Pairs left
1			2 (, 2 cases for )
2			3
3			4
4			1
5			4
6			3 (, 4 cases for )
7			3
8			4
9			3 (, 2 cases for )
10			2
11			4
12			2
13			4
14			4
15			4
16			4