Table A7.

Linear trails for BRISK cipher with S-Box${}^2$ and P-Box${}^2$.

Round	Block1	Block2	Bias	Active S-Box
1	0xc189	0xb110	5	3
2	0x8858	0x0918	5	3
3	0x8c04	0xe400	4	2
4	0x0072	0x000e	1	1
5	0x0700	0x0020	2	1
6	0x1000	0x0040	2	1
7	0x2000	0x0010	2	1
8	0x0800	0x0010	2	1
9	0x0800	0x0050	2	1
10	0x2800	0x0050	2	1
11	0x2800	0x0240	2.41	2
Total Probability:			30.41	17