Cryptanalysis of the Lightweight Block Cipher BORON

Algorithm 8

Finding linear trails with the minimal number of active S-boxes.

r: the number of rounds
n: the expected number of active S-Boxes in the whole trail
(1)	for to r do
(2)	for to 15 do
(3)	if before_sbox_mask_i_j = 0 AND after_sbox_mask_i_j = 0 then
(4)	flag_i_j = 0
(5)	else
(6)	flag_i_j = 1
(7)	end if
(8)	end for
(9)	end for
(10)
(11)
(12)
(13)	total_num = n