Fig. 5From: Quantum key recovery attack on SIMON32/64The decomposition of n-fold controlled-NOTBack to article page