Fig. 3
From: Multidimensional linear cryptanalysis with key difference invariant bias for block ciphers

Data-time tradeoff for the attack on 24-round LBlock
From: Multidimensional linear cryptanalysis with key difference invariant bias for block ciphers
Data-time tradeoff for the attack on 24-round LBlock