# Tag Info

The paper also discusses linear characteristics for multiple rounds: We present several approaches to produce linear characteristics for SIMON32/64 and present the best known linear characteristic for 11-round SIMON 32/64 with the bias of $2^{-16}$. We then extend this characteristic to 13 rounds of the cipher. We present several approaches ...