Rotational-XOR Rectangle Cryptanalysis on Round-Reduced Simon

Table 5

RXD trails for rectangle distinguishers of Simon-64/96 and 64/128.

Simon-64/96			Simon-64/128
Round	RXDes		Round	RXDes
	Round	Round		Round	Round
	States	Keys		States	Keys
15			7
16			8
17			9
18			10
19			11
20			12
21			13
22			14
23		—	15
			16		—
23			16
24			17
25			18
26			19
27			20
28			21
29			22
30			23
31			24
32		—	25
			26		—