Demonstration of the decoding attack on SIMON-32. See P. Zajac: Upper bounds on the complexity of algebraic cryptanalysis of ciphers with a low multiplicative complexity.

Use (at your risk) from SAGE command line interface:

load('simon.sage') decoding(y1,y2,maxtries)