On the Complexity of Impossible Differential Cryptanalysis

Figure 3

The initial rounds (a) and the final rounds (b) of the attack on SIMON32/64.

(a)

(b)