SAT-Based Security Evaluation for WARP against Linear Cryptanalysis

Table 13

The probability of the linear distinguishers with clustering effect for WARP.

Round	Mask		Trails	ALP
1			1
2			1
3			1
4			1
5			1
6			1
7			1
8			1
9			1
10			7
11			7
12			3
13			1,800
14			8,782
15			18,700
16			16,111
17			31,460
18			28,527
19			149,447
20			186,856