Fig. 9From: Quantum key recovery attack on SIMON32/64The quantum circuit of function h. The input register Δy is equal to \(E_{k_{1}}(m)\oplus E_{k_{1}}(m\oplus \Delta x_{2}).\) We use red dotted lines to split the calculation process of Δ19,Δ18,Δ17,Δ16,Δ15Back to article page