{"id":"https://openalex.org/W7224794347","doi":"https://doi.org/10.46586/tosc.abe0fhm2z1j3","title":"Provable Security against EDP-based Differential Cryptanalysis for Two-Round Arithmetization-Oriented SPNs with MDS Mixing","display_name":"Provable Security against EDP-based Differential Cryptanalysis for Two-Round Arithmetization-Oriented SPNs with MDS Mixing","publication_year":2026,"publication_date":"2026-10-30","ids":{"openalex":"https://openalex.org/W7224794347","doi":"https://doi.org/10.46586/tosc.abe0fhm2z1j3"},"language":"en","primary_location":{"id":"doi:10.46586/tosc.abe0fhm2z1j3","doi":"https://doi.org/10.46586/tosc.abe0fhm2z1j3","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tosc.abe0fhm2z1j3","pdf_url":null,"source":{"id":"https://openalex.org/S4210236173","display_name":"IACR Transactions on Symmetric Cryptology","issn_l":"2519-173X","issn":["2519-173X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["cwts-core","ddh","doaj","dongbi-b","jufo-1","norway-1","oarl","poland-20","russia-white-list-2"],"host_organization":"https://openalex.org/I904495901","host_organization_name":"Ruhr University Bochum","host_organization_lineage":["https://openalex.org/I904495901"],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Symmetric Cryptology","raw_type":"journal-article"},"volume":null,"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://doi.org/10.46586/tosc.abe0fhm2z1j3","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5072754929","display_name":"Alex Biryukov","orcid":"https://orcid.org/0000-0003-1404-6686","observed_orcids":["https://orcid.org/0000-0003-1404-6686"]},"institutions":[{"id":"https://openalex.org/I186903577","display_name":"University of Luxembourg","ror":"https://ror.org/036x5ad56","country_code":"LU","type":"education","lineage":["https://openalex.org/I186903577"]}],"countries":["LU"],"is_corresponding":false,"raw_author_name":"Alex Biryukov","raw_affiliation_strings":["University of Luxembourg, Luxembourg, Luxembourg"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Luxembourg, Luxembourg, Luxembourg","institution_ids":["https://openalex.org/I186903577"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5152867358","display_name":"Duy Nguyen","orcid":"https://orcid.org/0009-0007-6245-3063","observed_orcids":["https://orcid.org/0009-0007-6245-3063"]},"institutions":[{"id":"https://openalex.org/I186903577","display_name":"University of Luxembourg","ror":"https://ror.org/036x5ad56","country_code":"LU","type":"education","lineage":["https://openalex.org/I186903577"]}],"countries":["LU"],"is_corresponding":false,"raw_author_name":"Duy Nguyen","raw_affiliation_strings":["University of Luxembourg, Luxembourg, Luxembourg"],"raw_orcid":"https://orcid.org/0009-0007-6245-3063","affiliations":[{"raw_affiliation_string":"University of Luxembourg, Luxembourg, Luxembourg","institution_ids":["https://openalex.org/I186903577"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I186903577"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.82244691,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"2026","issue":"3","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9945999979972839,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9945999979972839,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11130","display_name":"Coding theory and cryptography","score":0.003100000089034438,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11693","display_name":"Cryptography and Residue Arithmetic","score":0.000699999975040555,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/jarvis","display_name":"Jarvis","score":0.9559999704360962},{"id":"https://openalex.org/keywords/hades","display_name":"Hades","score":0.9959999918937683},{"id":"https://openalex.org/keywords/vision","display_name":"vision","score":0.9110000133514404},{"id":"https://openalex.org/keywords/rescue","display_name":"rescue","score":0.8429999947547913},{"id":"https://openalex.org/keywords/impossible-differential-attack","display_name":"impossible differential attack","score":0.9829999804496765},{"id":"https://openalex.org/keywords/zero-knowledge-proofs","display_name":"zero-knowledge proofs","score":0.7070000171661377},{"id":"https://openalex.org/keywords/secure-multi-party-computation","display_name":"secure multi-party computation","score":0.9039999842643738}],"concepts":[{"id":"https://openalex.org/C131672422","wikidata":"https://www.wikidata.org/wiki/Q852594","display_name":"Provable security","level":3,"score":0.7171000242233276},{"id":"https://openalex.org/C93226319","wikidata":"https://www.wikidata.org/wiki/Q193137","display_name":"Differential (mechanical device)","level":2,"score":0.5677000284194946},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5525000095367432},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.538100004196167},{"id":"https://openalex.org/C147343967","wikidata":"https://www.wikidata.org/wiki/Q5159078","display_name":"Concrete security","level":3,"score":0.48510000109672546},{"id":"https://openalex.org/C82424418","wikidata":"https://www.wikidata.org/wiki/Q1826463","display_name":"Linear cryptanalysis","level":4,"score":0.43950000405311584},{"id":"https://openalex.org/C138777275","wikidata":"https://www.wikidata.org/wiki/Q6884054","display_name":"Mixing (physics)","level":2,"score":0.43459999561309814},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.43160000443458557},{"id":"https://openalex.org/C36123800","wikidata":"https://www.wikidata.org/wiki/Q1224471","display_name":"Differential cryptanalysis","level":4,"score":0.41920000314712524},{"id":"https://openalex.org/C165064840","wikidata":"https://www.wikidata.org/wiki/Q1321061","display_name":"Matching (statistics)","level":2,"score":0.38339999318122864},{"id":"https://openalex.org/C106544461","wikidata":"https://www.wikidata.org/wiki/Q543151","display_name":"Block cipher","level":3,"score":0.3815000057220459},{"id":"https://openalex.org/C151607707","wikidata":"https://www.wikidata.org/wiki/Q11673206","display_name":"Higher-order differential cryptanalysis","level":5,"score":0.38029998540878296},{"id":"https://openalex.org/C121822524","wikidata":"https://www.wikidata.org/wiki/Q5157582","display_name":"Computer security model","level":2,"score":0.37400001287460327},{"id":"https://openalex.org/C181149355","wikidata":"https://www.wikidata.org/wiki/Q897511","display_name":"Cryptanalysis","level":3,"score":0.366100013256073},{"id":"https://openalex.org/C45374587","wikidata":"https://www.wikidata.org/wiki/Q12525525","display_name":"Computation","level":2,"score":0.3587000072002411},{"id":"https://openalex.org/C2777655017","wikidata":"https://www.wikidata.org/wiki/Q1501161","display_name":"Toolbox","level":2,"score":0.34549999237060547},{"id":"https://openalex.org/C23130292","wikidata":"https://www.wikidata.org/wiki/Q5275358","display_name":"Differential privacy","level":2,"score":0.3449999988079071},{"id":"https://openalex.org/C2780264999","wikidata":"https://www.wikidata.org/wiki/Q7445032","display_name":"Security domain","level":2,"score":0.328900009393692},{"id":"https://openalex.org/C2776711565","wikidata":"https://www.wikidata.org/wiki/Q7445058","display_name":"Security parameter","level":3,"score":0.319599986076355},{"id":"https://openalex.org/C38369872","wikidata":"https://www.wikidata.org/wiki/Q7445009","display_name":"Security analysis","level":2,"score":0.30160000920295715},{"id":"https://openalex.org/C131275738","wikidata":"https://www.wikidata.org/wiki/Q7445023","display_name":"Security bug","level":5,"score":0.2955999970436096},{"id":"https://openalex.org/C9652623","wikidata":"https://www.wikidata.org/wiki/Q190109","display_name":"Field (mathematics)","level":2,"score":0.29190000891685486},{"id":"https://openalex.org/C118615104","wikidata":"https://www.wikidata.org/wiki/Q121416","display_name":"Discrete mathematics","level":1,"score":0.29109999537467957},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.27070000767707825}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.46586/tosc.abe0fhm2z1j3","doi":"https://doi.org/10.46586/tosc.abe0fhm2z1j3","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tosc.abe0fhm2z1j3","pdf_url":null,"source":{"id":"https://openalex.org/S4210236173","display_name":"IACR Transactions on Symmetric Cryptology","issn_l":"2519-173X","issn":["2519-173X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["cwts-core","ddh","doaj","dongbi-b","jufo-1","norway-1","oarl","poland-20","russia-white-list-2"],"host_organization":"https://openalex.org/I904495901","host_organization_name":"Ruhr University Bochum","host_organization_lineage":["https://openalex.org/I904495901"],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Symmetric Cryptology","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:96a0a4bc1d5d40aba989e7c5053592eb","doi":null,"is_oa":false,"landing_page_url":"https://doaj.org/article/96a0a4bc1d5d40aba989e7c5053592eb","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IACR Transactions on Symmetric Cryptology, Vol 2026, Iss 3 (2026)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.46586/tosc.abe0fhm2z1j3","doi":"https://doi.org/10.46586/tosc.abe0fhm2z1j3","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tosc.abe0fhm2z1j3","pdf_url":null,"source":{"id":"https://openalex.org/S4210236173","display_name":"IACR Transactions on Symmetric Cryptology","issn_l":"2519-173X","issn":["2519-173X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["cwts-core","ddh","doaj","dongbi-b","jufo-1","norway-1","oarl","poland-20","russia-white-list-2"],"host_organization":"https://openalex.org/I904495901","host_organization_name":"Ruhr University Bochum","host_organization_lineage":["https://openalex.org/I904495901"],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Symmetric Cryptology","raw_type":"journal-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W7099621632","https://openalex.org/W4295067264","https://openalex.org/W4405144445","https://openalex.org/W4389622033","https://openalex.org/W2103526652","https://openalex.org/W1168228272","https://openalex.org/W2141750148","https://openalex.org/W2081259981","https://openalex.org/W4315701804","https://openalex.org/W2945456853"],"abstract_inverted_index":{"Arithmetization-oriented":[0],"(AO)":[1],"primitives":[2,25,63,172],"play":[3],"an":[4],"important":[5],"role":[6],"in":[7,36,48],"making":[8],"modern":[9],"zero-knowledge":[10],"proof":[11],"(ZKP)":[12],"and":[13,122,158,173,200],"multiparty":[14],"computation":[15],"(MPC)":[16],"systems":[17],"efficient":[18],"enough":[19],"for":[20,170],"practical":[21],"use.":[22],"Since":[23],"these":[24,84],"are":[26,135],"relatively":[27],"new,":[28],"their":[29,49],"security":[30,51,60,145,185,194],"has":[31],"not":[32,191],"yet":[33],"been":[34,74],"studied":[35],"depth.":[37],"This":[38],"work":[39],"therefore":[40],"introduces":[41],"a":[42,100,113,125,153,202],"toolbox":[43],"to":[44,106,117,137],"address":[45],"one":[46],"gap":[47,54],"current":[50],"analyses.":[52],"The":[53],"is":[55,168],"that":[56,139,155,165,184,201],"when":[57],"assessing":[58],"the":[59,78,94,107],"of":[61,83,99,109,128,212],"AO":[62],"against":[64,146,186,195],"differential":[65,69,96,105,151,160,188,198],"cryptanalysis,":[66,152],"only":[67],"single-trail":[68,187],"attacks":[70,85],"have":[71],"so":[72],"far":[73],"rigorously":[75],"considered.":[76],"Using":[77],"toolbox,":[79],"more":[80,196],"powerful":[81],"generalizations":[82],"can":[86],"also":[87,163],"be":[88],"analyzed.":[89],"Its":[90],"main":[91],"tool":[92],"relates":[93],"expected":[95],"probability":[97],"(EDP)":[98],"two-round":[101],"substitution-permutation":[102],"network":[103],"(SPN)":[104],"number":[108],"rational":[110],"points":[111],"on":[112],"variety.":[114],"Applying":[115],"this":[116,166],"MiMC,":[118],"Jarvis,":[119],"HADES,":[120],"Vision,":[121],"Rescue":[123],"over":[124],"native":[126],"field":[127],"size":[129],"q":[130],"with":[131],"independent":[132],"round/sub-keys,":[133],"we":[134,148,182],"able":[136],"prove":[138],"two":[140],"rounds":[141],"already":[142],"provide":[143],"Omega(sqrt(q))":[144],"what":[147],"call":[149],"EDP-based":[150,204],"model":[154],"covers":[156],"truncated":[157],"impossible":[159],"attacks.":[161],"We":[162],"show":[164],"bound":[167],"tight":[169],"several":[171],"parameter":[174],"choices":[175],"by":[176],"constructing":[177],"matching":[178],"O(sqrt(q))":[179],"distinguishers.":[180],"Finally,":[181],"demonstrate":[183],"cryptanalysis":[189],"does":[190],"automatically":[192],"imply":[193],"generalized":[197],"attacks,":[199],"quick":[203],"analysis":[205],"naturally":[206],"rediscovers":[207],"previously":[208],"known":[209],"subspace-trail":[210],"vulnerabilities":[211],"HADES":[213],"partial":[214],"rounds.":[215]},"counts_by_year":[],"updated_date":"2026-11-03T10:50:19.383937","created_date":"2026-10-31T00:00:00"}