In this study, the authors settle the feasibility of mixed integer linear programming (MILP)‐aided bit‐based division property for ciphers with non‐bit‐permutation linear layers. First, they transform the complicated linear layers to their primitive representations. Then, the original Copy and exclusive OR models are generalised, and these models are exploited to depict the primitive representations. Accord‐ ingly, the MILP‐aided bit‐based division property can be applied to much more primitives with complicated linear layers. As an illus‐ tration, they rst evaluate the bit‐based division properties of some word‐oriented block ciphers. For Midori64, they obtain a 7‐round integral distinguisher, which achieves one more round than the previous results. At the same time, the data requirements of some existing distinguishers are also reduced. They decrease the data complexities of 4‐round and 5‐round distinguishers for LED and Joltik‐BC by half. Then, the bit‐based division properties of some bit‐oriented ciphers such as Serpent and Noekeon are considered. The data complexities of their distinguishers for short rounds are reduced. Besides, they evaluate the bit‐based division properties of the internal permutations in some hash functions. An 18‐round zero‐sum distinguisher for SPONGENT‐88 is proposed, which achieves four more rounds than the previous ones. Some integral distinguishers for PHOTON permutations are improved.

SIMON is a family of lightweight block ciphers publicly released by National Security Agency (NSA). Up to now, there have been many cryptanalytic results on it by means of impossible differential, integral, zero‐correlation linear cryptanalysis and so forth. In this study, the authors analyse the characteristic of the Boolean functions of SIMON32 and find that the presentation of zero‐sum property is influenced by the degree of the corresponding Boolean function. As a result, the zero‐sum integral distinguisher for 14‐round SIMON32 is identified which is same to the one given by Wang et.al . Inspired by this finding, they also experimentally find the zero‐sum integral distinguisher for 16‐round SIMON48. Then, the integral attacks on 22‐round SIMON32, 22‐round SIMON48/72 and 23‐round SIMON48/96 are given. They improve the previous integral attack on SIMON32 from 21‐round to 22‐round, and the first integral attack on SIMON48 is proposed.