Related-Key Differential Attacks on Reduced-Round LBlock

Table 2

Summary of results about the lower bounds on the number of active S-boxes in related-key differential characteristics under different rounds of LBlock.

Rounds	Lower bounds
	This paper	[16]	[17]
1	0	0	—
2	0	0	—
3	0	0	—
4	0	0	—
5	1	1	1
6	2	2	2
7	4	3	4
8	6	5	6
9	7	6	8
10	9	8	10
11	11	10	12
12	13	—	—
13	16	—	—
14	18	—	—
15	20	—	23
16	23	—	—
17	26	—	—
18	28	—	—
19		—	—