Related-Key Differential Attacks on Reduced-Round LBlock

Table 7

19-round related-key differential characteristic with 31 active S-boxes (#AS means the number of active S-boxes.).

				#AS
1	30000004	400010E3	00003000	3
2	0000E800	30000004	00003800	1
3	00000400	0000E800	00000400	0
4	00E80000	00000400	00180000	1
5	000A0000	00E80000	001C0000	2
6	E0090000	000A0000	00020000	3
7	0C800000	E0090000	0C000000	2
8	090E00E0	0C800000	06000000	4
9	06000000	090E00E0	06000030	1
10	0E00E008	06000000	00000018	3
11	500000A4	0E00E008	00000018	3
12	0000000C	500000A4	00001800	3
13	00000C00	0000000C	00000C00	0
14	00000C00	00000C00	00000C00	0
15	000C0000	00000C00	000C0000	0
16	000C0000	000C0000	00060000	1
17	00000000	000C0000	00060000	2
18	0F000000	00000000	0F000000	1
19	00000000	0F000000	09000000	1
20	3000000F	00000000	—	—