Related-Key Differential Attacks on Reduced-Round LBlock

Table 4

Summary of attacks on LBlock.

Attack type	#Rounds	Time	Data	#Keys per attack	#Weak keys	Reference
Boomerang	18			1		[22]
ID	20			1		[5]
Integral	20			1		[5]
ID	21			1		[14]
ID	21			1		[15]
ID	22			1		[15]
ID	23			1		[23]
RKD	22			2		[24]
RKID	22			4		[18]
RKD				2		Section 4
RKID	23			4		[19]
RKD				2		Section 4

Remark: ID denotes impossible differential; RKD denotes related-key differential; RKID denotes Related-key impossible differential.