Differential-Linear Cryptanalsis on SIMECK32/64 and SIMON32/64

Abstract In this paper, we give differential-linear cryptanalysis of SIMON, which is a family lightweight block ciphers published by the National Security Agency, and SIMECK, proposed Yang et al. Firstly, all input difference output masks with one active bit are traversed to obtain 9-round SIMON32/64 distinguisher 10-round SIMECK32/64 distinguisher. Then, 12-round bias 2 −12.69 13-round −14.03 can be obtained searching round differential characteristics forward two rounds linear approximations backward. The dynamic key guessing technique Wang has excellent advantages in SIMON-like cipher recovery process. Therefore, have applied it cryptanalysis. extended four backward attack 20-round time complexity 55.68 data 28 . And SIMECk32/64 21-round 50.67 30 These best results for open literature.