Fig. 1
From: Multidimensional linear cryptanalysis with key difference invariant bias for block ciphers

The diagram of key-recovery attack on LBlock
From: Multidimensional linear cryptanalysis with key difference invariant bias for block ciphers
The diagram of key-recovery attack on LBlock