Table 1 Comparison of key-recovery attacks on LBlock

RK

Differential

22

2^64.1RKKP

2⁶⁷

N/A

(Liu et al. 2012)

Imp.Diff

22

2⁴⁷RKCP

2⁷⁰

N/A

(Minier and Naya-Plasencia 2012)

Imp.Diff

23

2^64.1RKKP

2^78.3

2^61.4

(Wen et al. 2014)

Key Diff Inv Bias

24

2^62.95RKKP

2^70.67

2⁶¹

(Bogdanov et al. 2013)

Key Diff Inv Bias

24

2^62.83RKKP

2^68.08

2⁶¹

this paper

Key Diff Inv Bias

24

2^62.3RKDKP

2^68.07

2⁶¹

this paper

Key Diff Inv Bias

25

2^60.4RKDKP

2^78.85

2⁶¹

this paper

SK

Integral

20

2^63.6CP

2^39.6

2³⁵

(Sasaki and Wang 2013a)

Integral

21

2^61.6CP

2^54.16

2^51.58

(Sasaki and Wang 2013b)

Integral

22

2⁶¹CP

2⁷⁰

2⁶³

(Sasaki and Wang 2013b)

Zero-Correlation

22

2⁶²DKP

2^71.27

2⁶⁴

(Soleimany and Nyberg 2014)

Zero-Correlation

22

2⁶⁰DKP

2⁷⁹

2⁶⁴

(Soleimany and Nyberg 2014)

Zero-Correlation

23

2^62.1KP

2⁷⁶

2⁶⁰

(Wang and Wu 2014)

Imp.Diff

24

2⁵⁹CP

2^77.5

2⁷⁵

(Wang et al. 2016)