Simon (cipher)

From Wikipedia, the free encyclopedia
Jump to: navigation, search
Simon
Simon block cipher.svg
One round of Simon
General
Designers Ray Beaulieu, Douglas Shors, Jason Smith, Stefan Treatman-Clark, Bryan Weeks, Louis Wingers NSA
First published 2013
Related to Speck
Cipher detail
Key sizes 64, 72, 96, 128, 144, 192 or 256 bits
Block sizes 32, 48, 64, 96 or 128 bits
Structure Balanced Feistel network
Rounds 32, 36, 42, 44, 52, 54, 68, 69 or 72 (depending on block and key size)
Speed 7.5 cpb on Intel Xeon 5640 (Simon128/128)
Best public cryptanalysis
Differential cryptanalysis can break 46 rounds of Simon128/128 with 2125.6 data, 240.6 bytes memory and time complexity of 2125.7 with success rate of 0.632.[1]

Simon is a family of lightweight block ciphers publicly released by the NSA in June 2013.[2] Simon has been optimized for performance in hardware implementations, while its sister algorithm, Speck, has been optimized for software implementations. Simon is a balanced Feistel cipher.

Simon supports the following combinations of block sizes, key sizes and number of rounds:[3]

Block size (bits) Key size (bits) Rounds
32 64 32
48 72 36
96 36
64 96 42
128 44
96 96 52
144 54
128 128 68
192 69
256 72

References[edit]

  1. ^ "Differential and Linear Cryptanalysis of Reduced-Round Simon". Retrieved 2014-04-16. 
  2. ^ Schneier, Bruce. "Schneier on Security". Retrieved 2013-07-17. 
  3. ^ "The Simon and Speck Families Of Lightwieght Block Ciphers". Retrieved 2014-01-29.