Table A8.

Differential trails for BRISK cipher with S-Box${}^2$ and P-Box${}^2$.

Round	Block1	Block2	${\mathbf{log}}_2\mathbf{p}$	Active S-Box
1	0x0000	0x8000	2	1
2	0x0040	0x0001	3	1
3	0x0080	0x1040	6	2
4	0x2008	0x0020	2	1
5	0x1000	0x0008	2	1
6	0x0400	0x0000	0	0
7	0x0000	0x0400	3	1
8	0x0002	0x0008	3	1
9	0x0400	0x1000	3	1
10	0x0008	0x0001	3	1
11	0x0080	0x000a	3	1
Total Probability:			30	11