Rotational-XOR Rectangle Cryptanalysis on Round-Reduced Simon

Table 4

RXD trails for rectangle distinguishers of Simon-32/64, 48/72, and 48/96.

Simon-32/64			Simon-48/72			Simon-48/96
Round	RXDes		Round	RXDes		Round	RXDes
	Round	Round		Round	Round		Round	Round
	States	Keys		States	Keys		States	Keys
8			5			12
9			6			13
10			7			14
11			8			15
12			9			16
13			10			17
14			11			18
15			12			19
16		—	13			20
			14		—	21		—
16			14			21
17			15			22
18			16			23
19			17			24
20			18			25
21			19			26
22			20			27
23			21		—	28
24		—	22	—	—	29
						30		—