Differential Analysis of Block Ciphers SIMON and SPECK

Alex Biryukov, Arnab Roy, Vesselin Velichkov

Research output: Chapter in Book/Report/Conference proceedingConference contribution


In this paper we continue the previous line of research on the analysis of the differential properties of the lightweight block ciphers Simon and Speck. We apply a recently proposed technique for automatic search for differential trails in ARX ciphers and improve the trails in Simon32 and Simon48 previously reported as best. We further extend the search technique for the case of differentials and improve the best previously reported differentials on Simon32, Simon48 and Simon64 by exploiting more effectively the strong differential effect of the cipher. We also present improved trails and differentials on Speck32, Speck48 and Speck64. Using these new results we improve the currently best known attacks on several versions of Simon and Speck. A second major contribution of the paper is a graph based algorithm (linear time) for the computation of the exact differential probability of the main building block of Simon: an AND operation preceded by two bitwise shift operations. This gives us a better insight into the differential property of the Simon round function and differential effect in the cipher. Our algorithm is general and works for any rotation constants. The presented techniques are generic and are therefore applicable to a broader class of ARX designs.
Original languageEnglish
Title of host publicationFSE 2014: Fast Software Encryption
EditorsCarlos Cid, Christian Rechberger
Place of PublicationBerlin, Heidelberg
PublisherSpringer Berlin Heidelberg
Number of pages25
ISBN (Print)978-3-662-46706-0
Publication statusPublished - 2015
Event21st International Workshop on Fast Software Encryption - London, United Kingdom
Duration: 3 Mar 20145 Mar 2014


Conference21st International Workshop on Fast Software Encryption
Abbreviated titleFSE 2014
CountryUnited Kingdom
Internet address

Fingerprint Dive into the research topics of 'Differential Analysis of Block Ciphers SIMON and SPECK'. Together they form a unique fingerprint.

Cite this