Abstract:SIMON is a family of lightweight block ciphers published by the U.S. National Security Agency (NSA) in 2013. Due to its novel and bit-based design, integral cryptanalysis on SIMON seems a tough job. At EUROCRYPT 2015 Todo proposed division property which is a generalized integral property, and he applied this technique to searching integral distinguishers of SIMON block ciphers by considering the left and right halves of SIMON independently. As a result, he found 11-round integral distinguishers for both SIMON48 and SIMON64. Recently, at FSE 2016 Todo et al. proposed bit-based division property that considered each bit independently. This technique can find more accurate distinguishers, however, as pointed out by Todo et al. the time and memory complexity is bounded by 2(n) for an n-bit block cipher. Thus, bit-based division property is only applicable to SIMON32.In this paper we propose a new technique that achieves a trade-off between considering each bit independently and considering left and right halves as a whole, which is actually a trade-off between time-memory and the accuracy of the distinguishers. We proceed by splitting the state of SIMON into small pieces and study the division property propagations of circular shift and bitwise AND operations under the state partition. Moreover, we propose two different state partitions and study the influences of different partitions on the propagation of division property. We find that different partitions greatly impact the division property propagation of circular shift which will finally result in a big difference on the length of integral distinguishers. By using a tailored search algorithm for SIMON, we find 12-round integral distinguishers for Simon48 and Simon64 respectively, which improve Todo's results by one round for both variants.

Remainder Sign Analysis in Fixed-point Division

Implementation of High Performance Single-Precision Divider

On the Divided Differences of the Remainder in Polynomial Interpolation

Some Results on Numerical Divided Difference Formulas

Division floating-point double precision based on SRT and Restoring algorithm

On the divisor problem with congruence conditions

On the Sign Changes in A Weighted Divisor Problem

Study on Double Precision Floating Point Division

Generic design of Chinese remaindering schemes

An Efficient Base Conversion Using Variable Length Segmentation and Remainder Transfer.

General remainder theorem and factor theorem for polynomials over non-commutative coefficient rings

Solutions to some sign change problems on the functions involving sums of divisors

Improved Arithmetic for Radix-2 Redundant Signed Digit Number Addition

The Mixed-Radix Chinese Remainder Theorem and Its Applications to Residue Comparison

On the Division Property of Simon48 and Simon64.

Number systems and the Chinese Remainder Theorem

A Pipelined Division for Fixed Operation Using User-defined Floating Point

A High-Accuracy Approximate Adder with Correct Sign Calculation

A Closed-Form Robust Chinese Remainder Theorem and Its Performance Analysis

Formal Specification & Verification of Non Restoring Array Divider

A Robust Generalized Chinese Remainder Theorem for Two Integers