Table 12.

Linear trails for BRISK cipher.

Cipher Version	Plaintext	Ciphertext	Bias	Active S-Boxes
S-Box${}^1$ and P-Box${}^1$	0xa43b 0x26c6	0x0001 0x0080	31	17
S-Box${}^2$ and P-Box${}^2$	0xc189 0xb110	0x2800 0x0240	30.41	17