SAT-Based Security Evaluation for WARP against Linear Cryptanalysis

Table 4

The shuffle operation.

	0	1	2	3	4	5	6	7	8	9	10	11	12	13	14	15
	31	6	29	14	1	12	21	8	27	2	3	0	25	4	23	10
	16	17	18	19	20	21	22	23	24	25	26	27	28	29	30	31
	15	22	13	30	17	28	5	24	11	18	19	16	9	20	7	26