Покращений криптоаналіз SIMON і SPECK

Abstract

This paper analyzes the NSA's lightweight block ciphers SIMON and SPECK. For SIMON, we derive a closed formula for the correlations and differential probabilities of its main nonlinear transformation φ(x)=x ⊙S1(x) and describe its