Differential and Linear Cryptanalysis of Reduced-Round Simon

Farzaneh Abed; Eik List; Stefan Lucks; Jakob Wenzel

Paper 2013/526 Original: eprint.iacr.org/2013/526 ↗

Differential and Linear Cryptanalysis of Reduced-Round Simon

Farzaneh Abed

Eik List

Stefan Lucks

Jakob Wenzel

Abstract

This paper presents differential attacks of round-reduced versions of Simon with up to 18/32, 19/36, 25/44, 35/54, and 46/72 rounds for the 32-, 48-, 64-, 96-, and 128-bit versions, respectively. Furthermore, we consider in brief related-key rectangle, impossible-differential, and also linear attacks. While all our attacks are completely academic, they demonstrate the drawback of the aggressive optimizations in Simon.

Metadata

Available format(s): PDF
Category: Secret-key cryptography
Publication info: Preprint.
History: 2013-10-09: last updated; 2013-08-30: published
Short URL: https://ia.cr/2013/526
License: https://creativecommons.org/licenses/by/4.0/

BibTeX

@misc{cryptoeprint:2013/526,
      author = {Farzaneh Abed and Eik List and Stefan Lucks and Jakob Wenzel},
      title = {Differential and Linear Cryptanalysis of Reduced-Round Simon},
      howpublished = {Cryptology {ePrint} Archive, Paper 2013/526},
      year = {2013},
      url = {https://eprint.iacr.org/2013/526}
}