Cryptanalysis of the Lightweight Block Cipher BORON

Algorithm 9

Finding linear trails with the optimal bias.

r: the number of rounds
: the expected bias of the whole trail
(1)	for to 15 do
(2)	for to 15 do
(3)
(4)	end for
(5)	end for
(6)
(7)	for to r do
(8)	for to 15 do
(9)	bias_i_j
(10)	= linear_dist[before_sbox_mask_i_j][after_sbox_mask_i_j]
(11)	end for
(12)	end for
(13)
(14)
(15)
(16)