{"id":"https://openalex.org/W7225833221","doi":"https://doi.org/10.5281/zenodo.24136049","title":"NSA's SPECK128: an exhaustive SAT proof that the minimum weight of 12-round differential characteristics is 66","display_name":"NSA's SPECK128: an exhaustive SAT proof that the minimum weight of 12-round differential characteristics is 66","publication_year":2026,"publication_date":"2026-11-11","ids":{"openalex":"https://openalex.org/W7225833221","doi":"https://doi.org/10.5281/zenodo.24136049"},"language":"en","primary_location":{"id":"doi:10.5281/zenodo.24136049","doi":"https://doi.org/10.5281/zenodo.24136049","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.24136049","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"volume":null,"type":"preprint","is_traditional":true,"indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.5281/zenodo.24136049","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5151682926","display_name":"Nobuo Otoi","orcid":"https://orcid.org/0009-0001-1445-3612","observed_orcids":["https://orcid.org/0009-0001-1445-3612"]},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Otoi, Nobuo","raw_affiliation_strings":["ba-cybersecurity.com, Tokyo, Japan"],"raw_orcid":"https://orcid.org/0009-0001-1445-3612","affiliations":[{"raw_affiliation_string":"ba-cybersecurity.com, Tokyo, Japan","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":["https://openalex.org/A5151682926"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11130","display_name":"Coding theory and cryptography","score":0.00039999998989515007,"subfield":{"id":"https://openalex.org/subfields/2607","display_name":"Discrete Mathematics and Combinatorics"},"field":{"id":"https://openalex.org/fields/26","display_name":"Mathematics"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10142","display_name":"Formal Methods in Verification","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1703","display_name":"Computational Theory and Mathematics"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[],"concepts":[{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.6115999817848206},{"id":"https://openalex.org/C108710211","wikidata":"https://www.wikidata.org/wiki/Q11538","display_name":"Mathematical proof","level":2,"score":0.5684000253677368},{"id":"https://openalex.org/C118615104","wikidata":"https://www.wikidata.org/wiki/Q121416","display_name":"Discrete mathematics","level":1,"score":0.4887999892234802},{"id":"https://openalex.org/C94375191","wikidata":"https://www.wikidata.org/wiki/Q11205","display_name":"Arithmetic","level":1,"score":0.47530001401901245},{"id":"https://openalex.org/C98763669","wikidata":"https://www.wikidata.org/wiki/Q176645","display_name":"Markov chain","level":2,"score":0.4174000024795532},{"id":"https://openalex.org/C2777210771","wikidata":"https://www.wikidata.org/wiki/Q4927124","display_name":"Block (permutation group theory)","level":2,"score":0.4099000096321106},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.40720000863075256},{"id":"https://openalex.org/C63584917","wikidata":"https://www.wikidata.org/wiki/Q333286","display_name":"Bounding overwatch","level":2,"score":0.37950000166893005},{"id":"https://openalex.org/C125411270","wikidata":"https://www.wikidata.org/wiki/Q18653","display_name":"Encoding (memory)","level":2,"score":0.3752000033855438},{"id":"https://openalex.org/C45374587","wikidata":"https://www.wikidata.org/wiki/Q12525525","display_name":"Computation","level":2,"score":0.3562000095844269},{"id":"https://openalex.org/C6943359","wikidata":"https://www.wikidata.org/wiki/Q875276","display_name":"Boolean satisfiability problem","level":2,"score":0.3467000126838684},{"id":"https://openalex.org/C114614502","wikidata":"https://www.wikidata.org/wiki/Q76592","display_name":"Combinatorics","level":1,"score":0.335099995136261},{"id":"https://openalex.org/C159886148","wikidata":"https://www.wikidata.org/wiki/Q176645","display_name":"Markov process","level":2,"score":0.33469998836517334},{"id":"https://openalex.org/C168773769","wikidata":"https://www.wikidata.org/wiki/Q1350299","display_name":"Satisfiability","level":2,"score":0.31209999322891235},{"id":"https://openalex.org/C2778945305","wikidata":"https://www.wikidata.org/wiki/Q6865502","display_name":"Minimum weight","level":2,"score":0.3009999990463257},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.29510000348091125},{"id":"https://openalex.org/C2780428219","wikidata":"https://www.wikidata.org/wiki/Q16952335","display_name":"Cover (algebra)","level":2,"score":0.29109999537467957},{"id":"https://openalex.org/C2778770139","wikidata":"https://www.wikidata.org/wiki/Q1966904","display_name":"Solver","level":2,"score":0.2849000096321106},{"id":"https://openalex.org/C151201525","wikidata":"https://www.wikidata.org/wiki/Q177239","display_name":"Limit (mathematics)","level":2,"score":0.2847000062465668},{"id":"https://openalex.org/C93226319","wikidata":"https://www.wikidata.org/wiki/Q193137","display_name":"Differential (mechanical device)","level":2,"score":0.2721000015735626}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.5281/zenodo.24136049","doi":"https://doi.org/10.5281/zenodo.24136049","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.24136049","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},{"id":"doi:10.5281/zenodo.24136050","doi":"https://doi.org/10.5281/zenodo.24136050","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.24136050","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},{"id":"doi:10.5281/zenodo.24146411","doi":"https://doi.org/10.5281/zenodo.24146411","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.24146411","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.5281/zenodo.24136049","doi":"https://doi.org/10.5281/zenodo.24136049","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.24136049","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":3,"referenced_works":["https://openalex.org/W3146780285","https://openalex.org/W4383553174","https://openalex.org/W4404310329"],"related_works":[],"abstract_inverted_index":{"SPECK":[0],"is":[1,40,111,174,226],"a":[2,30,57,152,166,171,182],"family":[3],"of":[4,29,59,106,197,203,228],"lightweight":[5],"block":[6],"ciphers":[7],"designed":[8],"by":[9,72,113,122,148],"the":[10,25,92,133,140,159,186,190,204,217,222,224,235,239],"U.S.":[11],"National":[12],"Security":[13],"Agency":[14],"(NSA)":[15],"and":[16,50,109,139,155,170,177,189,242],"standardized":[17],"in":[18,124,175,181],"ISO/IEC":[19],"29167-22":[20],"for":[21,54],"RFID.":[22],"For":[23],"SPECK128,":[24],"minimum":[26],"weight":[27,60,82],"B_R":[28],"non-trivial":[31],"R-round":[32],"XOR-differential":[33],"characteristic":[34,58,80,154],"(Lipmaa\u2013Moriai":[35],"transition":[36],"probabilities,":[37],"Markov":[38],"assumption)":[39],"known":[41],"up":[42],"to":[43],"eleven":[44],"rounds,":[45],"with":[46,165,238],"B_10":[47],"=":[48,52,88],"49":[49],"B_11":[51,97],"58;":[53],"twelve":[55],"rounds":[56],"66":[61],"was":[62],"known,":[63],"so":[64,86],"58":[65],"\u2264":[66,68],"B_12":[67,87],"66.":[69],"We":[70,150],"show":[71,131],"an":[73],"exhaustive":[74],"SAT":[75,104,129],"computation":[76],"that":[77,98,132,227],"no":[78,136],"twelve-round":[79],"has":[81],"65":[83],"or":[84],"less,":[85],"66,":[89],"conditional":[90],"on":[91],"published":[93],"values":[94],"B_1,":[95],"\u2026,":[96],"enter":[99],"Matsui's":[100],"bounding":[101],"conditions.":[102],"The":[103],"model":[105,209],"Sun,":[107],"Wang":[108,110],"split":[112,134],"partial":[114],"weights":[115],"into":[116],"272":[117],"subproblems,":[118],"all":[119,198],"shown":[120],"unsatisfiable":[121],"kissat":[123],"66.1":[125],"process-days.":[126],"Nine":[127],"further":[128],"problems":[130],"misses":[135],"assignment;":[137],"they":[138],"89":[141],"shortest":[142],"subproblems":[143],"carry":[144],"DRAT":[145,201],"certificates":[146],"verified":[147],"drat-trim.":[149],"print":[151],"weight-66":[153],"check":[156,164],"it":[157],"inside":[158],"same":[160],"model.":[161],"A":[162],"second":[163,240],"separately":[167],"written":[168],"encoding":[169,241],"different":[172],"solver":[173],"progress":[176],"will":[178,233],"be":[179],"added":[180],"later":[183],"version.":[184],"Files:":[185],"preprint":[187],"(PDF)":[188],"archive":[191],"(code,":[192],"per-piece":[193],"logs,":[194],"SHA-256":[195],"manifest":[196],"solved":[199],"files,":[200],"proofs":[202],"coverage":[205],"formulas,":[206],"certification":[207],"log,":[208],"checks,":[210],"second-encoding":[211],"scripts).":[212],"Version":[213,231],"1.0.1":[214],"changes":[215],"only":[216],"title,":[218],"which":[219],"now":[220],"states":[221],"method;":[223],"content":[225],"version":[229],"1.0.":[230],"1.1":[232],"add":[234],"completed":[236],"re-check":[237],"CaDiCaL.":[243]},"counts_by_year":[],"updated_date":"2026-11-12T12:28:57.059296","created_date":"2026-11-12T00:00:00"}