SAT-Based Security Evaluation for WARP against Linear Cryptanalysis

Table 1

Summary of distinguishers in the single key scenarios for WARP.

Approach	Rounds	Probability	Data	References
Linear distinguisher	18		-	[12]
	18		-	Section 5
	19		-	Section 5
	20		-	Section 5
Differential distinguisher	18		-	[19]
	18		-	[18]
	19		-	[18]
	19		-	[20]
	20		-	[18]
Impossible differential distinguisher	21	-	-	[12, 21]
Zero-correlation distinguisher	21	-	-	[14, 15]
Integral distinguisher	20	-		[12]
	24	-		[14]
Boomerang distinguisher	23		-	[22]

Bold values refers to the new results obtained in this article, and explanations have been added in the paper.