Improved Linear Cryptanalysis of Reduced-Round SIMON-32 and SIMON-48

Mohamed Ahmed Abdelraheem, Javad Alizadeh, Hoda A. Alkhzaimi, Mohammad Reza Aref, Nasour Bagheri, Praveen Gauravaram

Research output: Chapter in Book/Report/Conference proceedingArticle in proceedingsResearchpeer-review


In this paper we analyse two variants of SIMON family of light-weight block ciphers against variants of linear cryptanalysis and present the best linear cryptanalytic results on these variants of reducedround SIMON to date. We propose a time-memory trade-off method that finds differential/ linear trails for any permutation allowing low Hamming weight differential/ linear trails. Our method combines low Hamming weight trails found by the correlation matrix representing the target permutation with heavy Hamming weight trails found using a Mixed Integer Programming model representing the target differential/linear trail. Our method enables us to find a 17-round linear approximation for SIMON-48 which is the best current linear approximation for SIMON-48. Using only the correlation matrix method, we are able to find a 14-round linear approximation for SIMON-32 which is also the current best linear approximation for SIMON-32. The presented linear approximations allow us to mount a 23-round key recovery attack on SIMON-32 and a 24-round Key recovery attack on SIMON-48/96 which are the current best results on SIMON-32 and SIMON-48. In addition we have an attack on 24 rounds of SIMON-32 with marginal complexity.
Original languageEnglish
Title of host publicationProgress in Cryptology – INDOCRYPT 2015 : Proceedings of the 16th International Conference on Cryptology in India
EditorsAlex Biryukov, Vipul Goyal
Publication date2015
ISBN (Print)978-3-319-26616-9
ISBN (Electronic)978-3-319-26617-6
Publication statusPublished - 2015
Event16th International Conference on Cryptology in India - Bangalore, India
Duration: 6 Dec 20159 Dec 2015
Conference number: 16


Conference16th International Conference on Cryptology in India
Internet address
SeriesLecture Notes in Computer Science


  • Linear cryptanalysis
  • Linear hull
  • Correlation matrix
  • Mixed Integer Programming (MIP)
  • MIP


Dive into the research topics of 'Improved Linear Cryptanalysis of Reduced-Round SIMON-32 and SIMON-48'. Together they form a unique fingerprint.

Cite this