The SIMON and SPECK Families of Lightweight Block Ciphers

By Ray Beaulieu, Douglas Shors, Jason Smith, Stefan Treatman-Clark, Bryan Weeks, Louis Wingers. IACR Cryptology ePrint Archive, 2013

914 citations recorded by the source corpus.

View Paper: https://www.semanticscholar.org/paper/e4514e81e4106d7c4370a5fe7e3e0f31817ea133

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

Citations in the corpus

Modular Hardware Architecture for Somewhat Homomorphic Function Evaluation (2015, methodology): “For instance, evaluating the light-weight block cipher SIMON-64/128 [4] requires 4193 s (an hour and 10 min) on a 4-core Intel Core-i7 processor [29].”
SIMON and SPECK: Block Ciphers for the Internet of Things (2015, methodology): “One might argue that arbitrary bit permutations are fine in software, because efficient bit-sliced implementations are possible.”
The SKINNY Family of Block Ciphers and its Low-Latency Variant MANTIS (2016, background): “In comparison, the SIMON implementations from [2] do not include neither the cost of key expansion nor the cost of packing/unpacking the data, which prevents any meaningful comparison with the other lightweight ciphers having the same level of security (the argument to drop these costs relies on a s”
Automatic Security Evaluation and (Related-key) Differential Characteristic Search: Application to SIMON, PRESENT, LBlock, DES(L) and Other Bit-Oriented Block Ciphers (2014, methodology): “Firstly, this methodology is only suitable to evaluate the security of constructions with S-boxes, XOR operations and bit permutations, and can not be applied to block cipher like SPECK [5], which involve modulo addition and no S-boxes at all.”
HEPCloud: An FPGA-Based Multicore Processor for FV Somewhat Homomorphic Function Evaluation (2018, background): “, evaluating the decryption of a lightweight block cipher SIMON-64/128 (block/key size 64/128 bits) [3] requires 4,193 s (an hour and 10 minutes) on a 4-core Intel Core-i7 processor [23].”
Hawk: The Blockchain Model of Cryptography and Privacy-Preserving Smart Contracts (2016, methodology): “The circuit then applies a lightweight cipher like Speck [10] or Chaskey-LTS [47] with a 128-bit key to perform symmetric encryption in the CBC mode, as using the standard AES-128 instead will result in a much higher cost [38].”
Lightweight Cryptography Algorithms for Resource-Constrained IoT Devices: A Review, Comparison and Research Opportunities (2021, methodology): “The most compact hardware implementation recorded uses 48-bit block with 96-bit key with requirements of 884 GE whereas the most efﬁcient software implementation requires 599 cycles with 186-byte of ROM for 64-bit block with 128-bit key [95].”
Structural Evaluation by Generalized Integral Property (2015, background): “Since Simon has a non - bijective F - function and a bit - oriented structure , it is complicated task to construct the integral distinguisher .”
GIFT: A Small Present - Towards Reaching the Limit of Lightweight Encryption (2017, background): “The NSA proposed in 2013 two ciphers [4], SIMON and SPECK, that can reach much better efficiency in both hardware and software when compared to all other ciphers.”
Midori: A Block Cipher for Low Energy (2015, background): “TWINE [34], Piccolo [32], SIMON [6]) usually apply a round function to only one half of the state and as such structures can be implemented in hardware with low average power.”
The SIMON and SPECK lightweight block ciphers (2015, methodology): “Simon and Speck were proposed publicly in June 2013 [10] by a group of researchers in the US National Security Agency’s Research Directorate.”