Die Quellen zur Raeteis des Simon Lemnius /

"Erschienen im Jahresbericht der Historisch-antiquarischen Gesellschaft Graubündens für 1912 und 1913."

Cryptanalysis of SIMON Variants with Connections

SIMON is a family of 10 lightweight block ciphers published by Beaulieu et al. from the United States National Security Agency (NSA). A cipher in this family with K -bit key and N -bit block is called SIMON N/K . We present several linear characteristics for reduced-round SIMON32/64 that can be used for a key-recovery attack and extend them further to attack other variants of SIMON. Moreover, we provide results of key recovery analysis using several impossible differential characteristics starting from 14 out of 32 rounds for SIMON32/64 to 22 out of 72 rounds for SIMON128/256. In some cases the presented observations do not directly yield an attack, but provide a basis for further analysis for the specific SIMON variant. Finally, we exploit a connection between linear and differential characteristics for SIMON to construct linear characteristics for different variants of reduced-round SIMON. Our attacks extend to all variants of SIMON covering more rounds compared to any known results using linear cryptanalysis. We present a key recovery attack against SIMON128/256 which covers 35 out of 72 rounds with data complexity 2123 . We have implemented our attacks for small scale variants of SIMON and our experiments confirm the theoretical bias presented in this work.

Improved linear cryptanalysis of reduced-round SIMON-32 and SIMON-48

In this paper we analyse two variants of SIMON family of light-weight block ciphers against variants of linear cryptanalysis and present the best linear cryptanalytic results on these variants of reduced-round SIMON to date. We propose a time-memory trade-off method that finds differential/linear trails for any permutation allowing low Hamming weight differential/linear trails. Our method combines low Hamming weight trails found by the correlation matrix representing the target permutation with heavy Hamming weight trails found using a Mixed Integer Programming model representing the target differential/linear trail. Our method enables us to find a 17-round linear approximation for SIMON-48 which is the best current linear approximation for SIMON-48. Using only the correlation matrix method, we are able to find a 14-round linear approximation for SIMON-32 which is also the current best linear approximation for SIMON-32. The presented linear approximations allow us to mount a 23-round key recovery attack on SIMON-32 and a 24-round Key recovery attack on SIMON-48/96 which are the current best results on SIMON-32 and SIMON-48. In addition we have an attack on 24 rounds of SIMON-32 with marginal complexity.

Walther Simon of Hamburg with his wife and daughter Ursula outdoors; Schenectady, New York Portraits Family

Digital Image

Isidor Simon seated at an outdoor table with his wife Friederike nee Falkenburg and two grandchildren, Helmuth and Walther Simon Portraits Family

Digital Image

Portrait of Simon Ginsburg.

Digital Image

Studio portrait of Edith Nesanov nee Strauss with her husband Simon and son Assaf; Israel.

Digital Image

Simon Hochherr and Liselotte Hochherr; Ostende Beach Portraits; Couples

Handwritten information on back of photo(s).

Simon Hochherr and Ella Hochherr Portraits; Couples

Handwritten information on back of photo(s).

Simon Hochherr and Ella Hochherr with two unidentified women; Kohlhof Portraits; Groups

Handwritten information on back of photo(s).

Goldschmit Simon Cemeteries; Tombs

Digital Image