Further Observations on SIMON and SPECK Block Cipher Families

SIMON and SPECK families of block ciphers are well-known lightweight ciphers designed by the NSA. In this note, based on the previous investigations on SIMON, a closed formula for the squared correlations and differential probabilities of the mapping <inline-formula> <math display="inl...

Full description

Bibliographic Details
Main Author: Seyed Mojtaba Dehnavi
Format: Article
Language:English
Published: MDPI AG 2018-12-01
Series:Cryptography
Subjects:
Online Access:https://www.mdpi.com/2410-387X/3/1/1
_version_ 1811302318979678208
author Seyed Mojtaba Dehnavi
author_facet Seyed Mojtaba Dehnavi
author_sort Seyed Mojtaba Dehnavi
collection DOAJ
description SIMON and SPECK families of block ciphers are well-known lightweight ciphers designed by the NSA. In this note, based on the previous investigations on SIMON, a closed formula for the squared correlations and differential probabilities of the mapping <inline-formula> <math display="inline"> <semantics> <mrow> <mi>ϕ</mi> <mrow> <mo>(</mo> <mi>x</mi> <mo>)</mo> </mrow> <mo>=</mo> <mi>x</mi> <mo>⊙</mo> <msup> <mi>S</mi> <mn>1</mn> </msup> <mrow> <mo>(</mo> <mi>x</mi> <mo>)</mo> </mrow> </mrow> </semantics> </math> </inline-formula> on <inline-formula> <math display="inline"> <semantics> <msubsup> <mi mathvariant="double-struck">F</mi> <mn>2</mn> <mi>n</mi> </msubsup> </semantics> </math> </inline-formula> is given. From the aspects of linear and differential cryptanalysis, this mapping is equivalent to the core quadratic mapping of SIMON via rearrangement of coordinates and EA -equivalence. Based on the proposed explicit formula, a full description of DDT and LAT of <inline-formula> <math display="inline"> <semantics> <mi>ϕ</mi> </semantics> </math> </inline-formula> is provided. In the case of SPECK, as the only nonlinear operation in this family of ciphers is addition mod <inline-formula> <math display="inline"> <semantics> <msup> <mn>2</mn> <mi>n</mi> </msup> </semantics> </math> </inline-formula>, after reformulating the formula for linear and differential probabilities of addition mod <inline-formula> <math display="inline"> <semantics> <msup> <mn>2</mn> <mi>n</mi> </msup> </semantics> </math> </inline-formula>, straightforward algorithms for finding the output masks with maximum squared correlation, given the input masks, as well as the output differences with maximum differential probability, given the input differences, are presented. By the aid of the tools given in this paper, the process of the search for linear and differential characteristics of SIMON and SPECK families of block ciphers could be sped up, and the complexity of linear and differential attacks against these ciphers could be reduced.
first_indexed 2024-04-13T07:27:17Z
format Article
id doaj.art-a66898c3c5d14cafbd5baa06c694116b
institution Directory Open Access Journal
issn 2410-387X
language English
last_indexed 2024-04-13T07:27:17Z
publishDate 2018-12-01
publisher MDPI AG
record_format Article
series Cryptography
spelling doaj.art-a66898c3c5d14cafbd5baa06c694116b2022-12-22T02:56:28ZengMDPI AGCryptography2410-387X2018-12-0131110.3390/cryptography3010001cryptography3010001Further Observations on SIMON and SPECK Block Cipher FamiliesSeyed Mojtaba Dehnavi0Faculty of Mathematical and Computer Sciences, Kharazmi University, Tehran 19678, IranSIMON and SPECK families of block ciphers are well-known lightweight ciphers designed by the NSA. In this note, based on the previous investigations on SIMON, a closed formula for the squared correlations and differential probabilities of the mapping <inline-formula> <math display="inline"> <semantics> <mrow> <mi>ϕ</mi> <mrow> <mo>(</mo> <mi>x</mi> <mo>)</mo> </mrow> <mo>=</mo> <mi>x</mi> <mo>⊙</mo> <msup> <mi>S</mi> <mn>1</mn> </msup> <mrow> <mo>(</mo> <mi>x</mi> <mo>)</mo> </mrow> </mrow> </semantics> </math> </inline-formula> on <inline-formula> <math display="inline"> <semantics> <msubsup> <mi mathvariant="double-struck">F</mi> <mn>2</mn> <mi>n</mi> </msubsup> </semantics> </math> </inline-formula> is given. From the aspects of linear and differential cryptanalysis, this mapping is equivalent to the core quadratic mapping of SIMON via rearrangement of coordinates and EA -equivalence. Based on the proposed explicit formula, a full description of DDT and LAT of <inline-formula> <math display="inline"> <semantics> <mi>ϕ</mi> </semantics> </math> </inline-formula> is provided. In the case of SPECK, as the only nonlinear operation in this family of ciphers is addition mod <inline-formula> <math display="inline"> <semantics> <msup> <mn>2</mn> <mi>n</mi> </msup> </semantics> </math> </inline-formula>, after reformulating the formula for linear and differential probabilities of addition mod <inline-formula> <math display="inline"> <semantics> <msup> <mn>2</mn> <mi>n</mi> </msup> </semantics> </math> </inline-formula>, straightforward algorithms for finding the output masks with maximum squared correlation, given the input masks, as well as the output differences with maximum differential probability, given the input differences, are presented. By the aid of the tools given in this paper, the process of the search for linear and differential characteristics of SIMON and SPECK families of block ciphers could be sped up, and the complexity of linear and differential attacks against these ciphers could be reduced.https://www.mdpi.com/2410-387X/3/1/1SIMONSPECKDDTLATpseudo-octal representationgaps and blocks representationmodular addition mod 2<i><sup>n</sup></i>
spellingShingle Seyed Mojtaba Dehnavi
Further Observations on SIMON and SPECK Block Cipher Families
Cryptography
SIMON
SPECK
DDT
LAT
pseudo-octal representation
gaps and blocks representation
modular addition mod 2<i><sup>n</sup></i>
title Further Observations on SIMON and SPECK Block Cipher Families
title_full Further Observations on SIMON and SPECK Block Cipher Families
title_fullStr Further Observations on SIMON and SPECK Block Cipher Families
title_full_unstemmed Further Observations on SIMON and SPECK Block Cipher Families
title_short Further Observations on SIMON and SPECK Block Cipher Families
title_sort further observations on simon and speck block cipher families
topic SIMON
SPECK
DDT
LAT
pseudo-octal representation
gaps and blocks representation
modular addition mod 2<i><sup>n</sup></i>
url https://www.mdpi.com/2410-387X/3/1/1
work_keys_str_mv AT seyedmojtabadehnavi furtherobservationsonsimonandspeckblockcipherfamilies