verify_simon
QC-008 Simon collision: certify a presented collision for a hidden mask. x and y are equal-length bit strings with x != y and x XOR y == mask, and f(x) == f(y) (fx and fy are the presented function values). WIN when all three hold, MISS naming the failing relation. The mask is presented, never recovered. Floats refused.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| x | No | first input bit string, same length as mask | |
| y | No | second input bit string; x XOR y must equal mask | |
| fx | No | presented f(x), decimal or bit string | |
| fy | No | presented f(y); must equal fx | |
| mask | No | hidden mask as a bit string, e.g. 11 |