Quantum Attack Implementation of TWINE Block Cipher

The result of resource consumption in quantum attack implementation of cryptographic algorithm is an important metric to evaluate the security strength of cryptographic algorithm against quantum attack. This paper studies complete implementation of quantum attack on cryptographic algorithm using Grover meets Simon method. We find 9-round quantum distinguisher whose round is the longest currently about TWINE, and utilize Grover meets Simon method to carry out 14/15-round quantum key recovery attack on TWINE-80/TWINE-128 with lower complexity than exhaust attack. Furthermore, we give complete implementation of quantum oracle and QAA algorithm in TWINE’s quantum key recovery attack for the first time. The circuit is suitable for all implementation of quantum key recovery attack on block cipher using Grover meets Simon method.