<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE ArticleSet PUBLIC "-//NLM//DTD PubMed 2.7//EN" "https://dtd.nlm.nih.gov/ncbi/pubmed/in/PubMed.dtd">
<ArticleSet>
<Article>
<Journal>
				<PublisherName>Iranian Society of Cryptology</PublisherName>
				<JournalTitle>The ISC International Journal of Information Security</JournalTitle>
				<Issn>2008-2045</Issn>
				<Volume></Volume>
				<Issue>Articles in Press</Issue>
				<PubDate PubStatus="epublish">
					<Year>2026</Year>
					<Month>02</Month>
					<Day>12</Day>
				</PubDate>
			</Journal>
<ArticleTitle>Cryptanalysis of Reduced-Round GFRX-64</ArticleTitle>
<VernacularTitle></VernacularTitle>
			<FirstPage></FirstPage>
			<LastPage></LastPage>
			<ELocationID EIdType="pii">240517</ELocationID>
			
<ELocationID EIdType="doi">10.22042/isecure.2026.240517</ELocationID>
			
			<Language>EN</Language>
<AuthorList>
<Author>
					<FirstName>Javad</FirstName>
					<LastName>Alizadeh</LastName>
<Affiliation>Fath Center, Faculty and Research Center of Computer, Imam Hossein University, Tehran, Iran.</Affiliation>

</Author>
<Author>
					<FirstName>Bahman</FirstName>
					<LastName>Madadi</LastName>
<Affiliation>Faculty and Research Center of Computer, Imam Hossein University, Tehran, Iran.</Affiliation>

</Author>
</AuthorList>
				<PublicationType>Journal Article</PublicationType>
		<Abstract>In 2023, Zhang et al. introduced the lightweight block cipher family GFRX-b/k, offering various versions with different block (b) and key (k) lengths. Due to the similarity of the GFRX’s round function to that of the SIMON, the designers referenced the cryptanalysis conducted on the SIMON-32 and claimed that the GFRX-64/128, with higher than 19 and 13 rounds, is resistant to differential and linear cryptanalysis, respectively. In this paper, we examine the differential and linear cryptanalysis of GFRX-64/96 and GFRX-64/128. We first introduce baseline neural distinguishers for up to 7 rounds of the GFRX-64/96. Subsequently, we extend a 6-round neural distinguisher by adding 2 rounds to perform a key recovery attack, achieving an 8-round key rank analysis through a deep learning-based approach. Furthermore, we conduct an automated cryptanalysis of GFRX-64 using a SAT/SMT-based framework, identifying an 11-round differential distinguisher with a probability of 2−62, a 15-round linear distinguisher with a correlation of 2−30, and a 17-round linear hull with a correlation of 2−31.61. These results indicate that reducing the differential and linear cryptanalysis of the GFRX block cipher to the differential and linear cryptanalysis of the SIMON block cipher cannot yield accurate results or bounds. To the best of our knowledge, this work represents the first third-party cryptanalysis of the GFRX block cipher, offering new insights into its security. </Abstract>
		<ObjectList>
			<Object Type="keyword">
			<Param Name="value">Lightweight Block Cipher</Param>
			</Object>
			<Object Type="keyword">
			<Param Name="value">GFRX</Param>
			</Object>
			<Object Type="keyword">
			<Param Name="value">Neural distinguisher</Param>
			</Object>
			<Object Type="keyword">
			<Param Name="value">SAT/SMT-based cryptanalysis</Param>
			</Object>
			<Object Type="keyword">
			<Param Name="value">Differential Cryptanalysis</Param>
			</Object>
			<Object Type="keyword">
			<Param Name="value">Linear cryptanalysis</Param>
			</Object>
		</ObjectList>
<ArchiveCopySource DocType="pdf">https://www.isecure-journal.com/article_240517_3f7492ebea8701157b08db0b82350239.pdf</ArchiveCopySource>
</Article>
</ArticleSet>
