Rotational-XOR Rectangle Cryptanalysis on Round-Reduced Simon

Table 2

Maximum probability of RXD trails for each number of rounds.

Round	Simon-32/64	Simon-48/72	Simon-48/96	Simon-64/96	Simon-64/128
15	1	1	1	1	1
6	1		1		1
7
8
9
10
11
12
13
14
15	—	—
16	—	—	—	—
17	—	—	—	—