MILP/MIQCP-Based Fully Automatic Method of Searching for Differential-Linear Distinguishers for SIMON-Like Ciphers

Table 1

The DL distinguishers for round-reduced SIMON and SIMECK.

Cipher	Round	Theoretical correlation	Experimental correlation	References
SIMON32	13			[24]
	13			This work
	14			This work
SIMON48	13			[24]
	15			This work
	16			This work
	17			This work
SIMON64	20			This work
SIMON96	25			This work
	26			This work
SIMON128	31			This work
	32			This work
SIMECK32	14			This work
SIMECK48	17			This work
	18			This work
SIMECK64	22			This work
	23			This work
	24			This work
	25			This work

Note: ^aDue to the complexity of the data, the experimental correlation refers to the segmented experimental validation of theoretical correlation. For more details, see Section 4 and the Appendix.