Related-Key Differential Attacks on Reduced-Round LBlock

Table 13

Related-key differential attack process on 23-round LBlock.

Step	Subkey	Master Key	#Bits	Time	#Pairs left
1			2 (, 2 cases for )
2			3
3			4
4			1
5			4
6			3 (, 4 cases for )
7			3
8			4
9			3 (, 2 cases for )
10			2
11			4
12			4
13			2
14			2
15			4
16			4
17			4
18			4
19			0
20			4
21			8 ( )