Cryptanalysis of the Lightweight Block Cipher BORON

Algorithm 5

Finding differential trails with the minimal number of active S-boxes.

r: the number of rounds
n: the expected number of active S-boxes in the whole trail
(1)	for to r do
(2)	for to 15 do
(3)	if AND then
(4)	flag_i_j = 0
(5)	else
(6)	flag_i_j = 1
(7)	end if
(8)	end for
(9)	end for
(10)
(11)
(12)
(13)