Table A6.

Differential trails for BRISK cipher with S-Box${}^1$ and P-Box${}^1$.

Round	Block1	Block2	${\mathbf{log}}_2\mathbf{p}$	Active S-Box
1	0x8000	0x0000	0	0
2	0x0000	0x8000	3	1
3	0x8000	0x1000	2	1
4	0x1000	0x9800	6	2
5	0x9800	0x1006	5	2
6	0x1006	0x0040	3	1
7	0x0040	0x5006	5	2
8	0x5006	0x9000	3	1
9	0x9000	0x5004	3.41	2
Total Probability:			30.41	12