<p><Emphasis FontCategory="NonProportional">SIMON</Emphasis> is a lightweight block cipher proposed by the National Security Agency. According to previous cryptanalytic results on <Emphasis FontCategory="NonProportional">SIMON</Emphasis>, differential and linear cryptanalysis are the two most effective attacks on it. Usually, there are many trails sharing the same input and output differences (resp. masks). These trails comprise the differential (resp. linear hull) and can be used together when mounting attacks. In ASIACRYPT 2021, Leurent et al. proposed a matrix-based method on <Emphasis FontCategory="NonProportional">SIMON</Emphasis>-like ciphers, where only trails whose active bits stay in a <i>w</i>-bit window are considered. The static window in each round is chosen to be <i>w</i> least significant bits. They applied this efficient framework on <Emphasis FontCategory="NonProportional">SIMON</Emphasis> and <Emphasis FontCategory="NonProportional">SIMECK</Emphasis>, and have obtained many better differentials and linear hulls than before. For <Emphasis FontCategory="NonProportional">SIMON</Emphasis>, they also found that there seems to be some potential for improvement, which should be further investigated. In this paper, we dynamically choose window for each round to achieve better distinguishers. Benefiting from these dynamic windows, we can obtain stronger differentials and linear hulls than previously proposed for almost all versions of <Emphasis FontCategory="NonProportional">SIMON</Emphasis>. Finally, we provided the best differential/linear attacks on <Emphasis FontCategory="NonProportional">SIMON48</Emphasis>, <Emphasis FontCategory="NonProportional">SIMON64</Emphasis>, and <Emphasis FontCategory="NonProportional">SIMON96</Emphasis> in terms of round number, complexity, or success rate.</p>

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Improved differential and linear cryptanalysis on round-reduced SIMON

  • Chao Niu,
  • Muzhou Li,
  • Jifu Zhang,
  • Meiqin Wang

摘要

SIMON is a lightweight block cipher proposed by the National Security Agency. According to previous cryptanalytic results on SIMON, differential and linear cryptanalysis are the two most effective attacks on it. Usually, there are many trails sharing the same input and output differences (resp. masks). These trails comprise the differential (resp. linear hull) and can be used together when mounting attacks. In ASIACRYPT 2021, Leurent et al. proposed a matrix-based method on SIMON-like ciphers, where only trails whose active bits stay in a w-bit window are considered. The static window in each round is chosen to be w least significant bits. They applied this efficient framework on SIMON and SIMECK, and have obtained many better differentials and linear hulls than before. For SIMON, they also found that there seems to be some potential for improvement, which should be further investigated. In this paper, we dynamically choose window for each round to achieve better distinguishers. Benefiting from these dynamic windows, we can obtain stronger differentials and linear hulls than previously proposed for almost all versions of SIMON. Finally, we provided the best differential/linear attacks on SIMON48, SIMON64, and SIMON96 in terms of round number, complexity, or success rate.