SAT-Based Security Evaluation for WARP against Linear Cryptanalysis

Table 14

The distribution of the linear trials belonging to the linear hull for WARP.

Linear hull	Distribution of linear trails
	Trails	1	1	1	4
	Trails	1	1	1	4
	Trails	1	0	2
	Trails	1	6	16	38	100	192	289	494	664
	Trails	1	12	61	271	828	2,179
	Trails	168	488	1,072	5,563	5,912	5,497
	Trails	102	1,124	4,788	5,449	4,648
	Trails	2,579	6,151	5,124	5,045	4,356	3,769	4,436
	Trails	6,437	3,900	3,628	4,165	4,437	2,946	3,014
	Trails	300	2,690	32094	54,885	59,478
	Trails	296	5,281	64,342	63,144	37,475	4,876	11,442

The asterisk “” indicates not all linear trails with fixed correlation within the linear hull have been found.