SAT-Based Security Evaluation for WARP against Linear Cryptanalysis

Table 8

The minimum number of active linear Sboxes.

Round	1	2	3	4	5	6	7	8	9	10	11
Sbox	0	1	2	3	4	6	8	11	14	17	22
Round	12	13	14	15	16	17	18	19	20	21	22
Sbox	28	34	40	47	52	57	61	66	70	75	79

Bold values refers to the new results obtained in this paper, and explanations have been added in the paper.