{"id":"https://openalex.org/W3193386259","doi":"https://doi.org/10.1007/s00145-026-09571-y","title":"New Attacks on Feistel Structures with Improved Memory Complexities","display_name":"New Attacks on Feistel Structures with Improved Memory Complexities","publication_year":2026,"publication_date":"2026-03-03","ids":{"openalex":"https://openalex.org/W3193386259","doi":"https://doi.org/10.1007/s00145-026-09571-y","mag":"3193386259"},"language":"en","primary_location":{"id":"doi:10.1007/s00145-026-09571-y","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s00145-026-09571-y","pdf_url":"https://link.springer.com/content/pdf/10.1007/s00145-026-09571-y.pdf","source":{"id":"https://openalex.org/S190936789","display_name":"Journal of Cryptology","issn_l":"0933-2790","issn":["0933-2790","1432-1378"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cryptology","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://link.springer.com/content/pdf/10.1007/s00145-026-09571-y.pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5043947892","display_name":"Itai Dinur","orcid":null},"institutions":[{"id":"https://openalex.org/I124227911","display_name":"Ben-Gurion University of the Negev","ror":"https://ror.org/05tkyf982","country_code":"IL","type":"education","lineage":["https://openalex.org/I124227911"]}],"countries":["IL"],"is_corresponding":false,"raw_author_name":"Itai Dinur","raw_affiliation_strings":["Department of Computer Science, Ben-Gurion University, Be\u2019er Sheba, Israel"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, Ben-Gurion University, Be\u2019er Sheba, Israel","institution_ids":["https://openalex.org/I124227911"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5065467078","display_name":"Orr Dunkelman","orcid":"https://orcid.org/0000-0001-5799-2635"},"institutions":[{"id":"https://openalex.org/I91203450","display_name":"University of Haifa","ror":"https://ror.org/02f009v59","country_code":"IL","type":"education","lineage":["https://openalex.org/I91203450"]}],"countries":["IL"],"is_corresponding":true,"raw_author_name":"Orr Dunkelman","raw_affiliation_strings":["Computer Science Department, University of Haifa, Haifa, Israel"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Computer Science Department, University of Haifa, Haifa, Israel","institution_ids":["https://openalex.org/I91203450"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5114500405","display_name":"Nathan Keller","orcid":"https://orcid.org/0000-0002-1591-9840"},"institutions":[{"id":"https://openalex.org/I13955877","display_name":"Bar-Ilan University","ror":"https://ror.org/03kgsv495","country_code":"IL","type":"education","lineage":["https://openalex.org/I13955877"]}],"countries":["IL"],"is_corresponding":false,"raw_author_name":"Nathan Keller","raw_affiliation_strings":["Department of Mathematics, Bar-Ilan University, Ramat Gan, Israel"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Mathematics, Bar-Ilan University, Ramat Gan, Israel","institution_ids":["https://openalex.org/I13955877"]}]},{"author_position":"middle","author":{"id":null,"display_name":"David Ross","orcid":null},"institutions":[{"id":"https://openalex.org/I13955877","display_name":"Bar-Ilan University","ror":"https://ror.org/03kgsv495","country_code":"IL","type":"education","lineage":["https://openalex.org/I13955877"]}],"countries":["IL"],"is_corresponding":false,"raw_author_name":"David Ross","raw_affiliation_strings":["Department of Mathematics, Bar-Ilan University, Ramat Gan, Israel"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Mathematics, Bar-Ilan University, Ramat Gan, Israel","institution_ids":["https://openalex.org/I13955877"]}]},{"author_position":"last","author":{"id":null,"display_name":"Adi Shamir","orcid":null},"institutions":[{"id":"https://openalex.org/I53964585","display_name":"Weizmann Institute of Science","ror":"https://ror.org/0316ej306","country_code":"IL","type":"education","lineage":["https://openalex.org/I53964585"]}],"countries":["IL"],"is_corresponding":false,"raw_author_name":"Adi Shamir","raw_affiliation_strings":["Computer Science Department, The Weizmann Institute, Rehovot, Israel"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Computer Science Department, The Weizmann Institute, Rehovot, Israel","institution_ids":["https://openalex.org/I53964585"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5065467078"],"corresponding_institution_ids":["https://openalex.org/I91203450"],"apc_list":{"value":2890,"currency":"USD","value_usd":2890},"apc_paid":{"value":2890,"currency":"USD","value_usd":2890},"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.0003511,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"39","issue":"2","first_page":"146","last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11130","display_name":"Coding theory and cryptography","score":0.9983000159263611,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11017","display_name":"Chaos-based Image/Signal Encryption","score":0.9958000183105469,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8189043998718262},{"id":"https://openalex.org/keywords/ciphertext","display_name":"Ciphertext","score":0.5236173272132874},{"id":"https://openalex.org/keywords/plaintext","display_name":"Plaintext","score":0.47093454003334045},{"id":"https://openalex.org/keywords/block-cipher","display_name":"Block cipher","score":0.45470815896987915},{"id":"https://openalex.org/keywords/arithmetic","display_name":"Arithmetic","score":0.42701050639152527},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.40503454208374023},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.3902572989463806},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.36518317461013794},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.3257957696914673},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.25554174184799194},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.15807035565376282}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8189043998718262},{"id":"https://openalex.org/C93974786","wikidata":"https://www.wikidata.org/wiki/Q1589480","display_name":"Ciphertext","level":3,"score":0.5236173272132874},{"id":"https://openalex.org/C92717368","wikidata":"https://www.wikidata.org/wiki/Q1162538","display_name":"Plaintext","level":3,"score":0.47093454003334045},{"id":"https://openalex.org/C106544461","wikidata":"https://www.wikidata.org/wiki/Q543151","display_name":"Block cipher","level":3,"score":0.45470815896987915},{"id":"https://openalex.org/C94375191","wikidata":"https://www.wikidata.org/wiki/Q11205","display_name":"Arithmetic","level":1,"score":0.42701050639152527},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.40503454208374023},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.3902572989463806},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.36518317461013794},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.3257957696914673},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.25554174184799194},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.15807035565376282}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1007/s00145-026-09571-y","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s00145-026-09571-y","pdf_url":"https://link.springer.com/content/pdf/10.1007/s00145-026-09571-y.pdf","source":{"id":"https://openalex.org/S190936789","display_name":"Journal of Cryptology","issn_l":"0933-2790","issn":["0933-2790","1432-1378"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cryptology","raw_type":"journal-article"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.737.2992","is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.737.2992","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://eprint.iacr.org/2015/146.pdf","raw_type":"text"},{"id":"mag:3193386259","is_oa":false,"landing_page_url":"https://eprint.iacr.org/2015/146.pdf","pdf_url":null,"source":{"id":"https://openalex.org/S2764847869","display_name":"IACR Cryptology ePrint Archive","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":["https://openalex.org/P4322614454"],"host_organization_lineage_names":["Cryptology ePrint Archive"],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IACR Cryptology ePrint Archive","raw_type":null}],"best_oa_location":{"id":"doi:10.1007/s00145-026-09571-y","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s00145-026-09571-y","pdf_url":"https://link.springer.com/content/pdf/10.1007/s00145-026-09571-y.pdf","source":{"id":"https://openalex.org/S190936789","display_name":"Journal of Cryptology","issn_l":"0933-2790","issn":["0933-2790","1432-1378"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cryptology","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320323387","display_name":"University of Haifa","ror":"https://ror.org/02f009v59"},{"id":"https://openalex.org/F4320335863","display_name":"Center for Research in Applied Cryptography and Cyber Security, Bar-Ilan University","ror":null}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3193386259.pdf","grobid_xml":"https://content.openalex.org/works/W3193386259.grobid-xml"},"referenced_works_count":17,"referenced_works":["https://openalex.org/W183217503","https://openalex.org/W207657696","https://openalex.org/W773639476","https://openalex.org/W1487353416","https://openalex.org/W1503774814","https://openalex.org/W1515595447","https://openalex.org/W1518393264","https://openalex.org/W1814882979","https://openalex.org/W1993188486","https://openalex.org/W2065125661","https://openalex.org/W2077300005","https://openalex.org/W2107286688","https://openalex.org/W2109766996","https://openalex.org/W2149019291","https://openalex.org/W2164015945","https://openalex.org/W2199322517","https://openalex.org/W2252401345"],"related_works":["https://openalex.org/W2736152765","https://openalex.org/W3201777998","https://openalex.org/W2951625208","https://openalex.org/W3208458370","https://openalex.org/W62677305","https://openalex.org/W207657696","https://openalex.org/W351251939","https://openalex.org/W2610935322","https://openalex.org/W2952845510","https://openalex.org/W2163466490","https://openalex.org/W2722864435","https://openalex.org/W2950438833","https://openalex.org/W2395577395","https://openalex.org/W1793141329","https://openalex.org/W2611434455","https://openalex.org/W2087454690","https://openalex.org/W2121781119","https://openalex.org/W2950691787","https://openalex.org/W3029511265","https://openalex.org/W2798373574"],"abstract_inverted_index":{"Abstract":[0],"Feistel":[1,19,88],"structures":[2,20],"are":[3,203,239],"an":[4],"extensively":[5],"researched":[6],"type":[7],"of":[8,38,99,219,255,329,342,349,358],"cryptographic":[9],"schemes.":[10],"In":[11],"this":[12,28],"paper,":[13],"we":[14,202,210,246,269,297,344],"describe":[15],"improved":[16],"attacks":[17,40,57,78,238,259,354],"on":[18,90,216,260],"with":[21,94],"more":[22,207],"than":[23],"4":[24],"rounds.":[25],"We":[26],"achieve":[27],"by":[29,47,355],"a":[30,86,104,196,356],"new":[31,166,212,237],"attack":[32,106,167],"that":[33],"combines":[34],"the":[35,44,53,61,71,217,226,233,252,256,271,299,340,346,351],"main":[36],"benefits":[37],"meet-in-the-middle":[39],"(which":[41,58],"can":[42,59,107,247],"reduce":[43,60,232,251,270,298,345],"time":[45,134,162,192,323],"complexity":[46,63,254,272,300,348],"comparing":[48],"only":[49,169],"half":[50],"blocks":[51,69],"in":[52,70,73,225,228,339],"middle)":[54],"and":[55,80,135,163,193,221,293,324],"dissection":[56,138],"memory":[62,234,253,347],"but":[64],"have":[65],"to":[66,75,205,230,250,283,310,334],"guess":[67],"full":[68,294],"middle":[72],"order":[74,229],"perform":[76],"independent":[77,96],"above":[79],"below":[81],"it).":[82],"For":[83],"example,":[84,338],"for":[85],"7-round":[87],"structure":[89,227],"n":[91,100],"-bit":[92],"inputs":[93],"seven":[95],"round":[97],"keys":[98],"/2":[101],"bits":[102],"each,":[103],"MITM":[105],"use":[108,206,248],"(":[109,140,170],"$$2^{1.5n}$$":[110,122,171],"<mml:math":[111,123,142,154,172,184,276,285,303,312,360],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\">":[112,124,143,155,173,185,277,286,304,313,361],"<mml:msup>":[113,125,144,156,174,186,278,287,305,314,362],"<mml:mn>2</mml:mn>":[114,126,145,147,157,175,187,279,288,306,315,363],"<mml:mrow>":[115,127,146,176],"<mml:mn>1.5</mml:mn>":[116,128,177],"<mml:mi>n</mml:mi>":[117,129,148,158,178,188],"</mml:mrow>":[118,130,149,179],"</mml:msup>":[119,131,150,159,180,189,281,290,308,317,365],"</mml:math>":[120,132,151,160,181,190,282,291,309,318,366],",":[121,152,182],")":[133,161,191,292],"memory,":[136,194],"while":[137],"requires":[139,168],"$$2^{2n}$$":[141],"$$2^{n}$$":[153,183],"memory.":[164],"Our":[165,236],"using":[195],"few":[197],"known":[198,208,258,353],"plaintext/ciphertext":[199],"pairs.":[200],"When":[201],"allowed":[204],"plaintexts,":[209],"develop":[211],"techniques":[213,331],"which":[214],"rely":[215],"existence":[218],"multi-collisions":[220],"differential":[222],"properties":[223],"deep":[224],"further":[231],"complexity.":[235],"not":[240],"just":[241],"theoretical":[242],"generic":[243],"constructions\u2014in":[244],"fact,":[245],"them":[249],"best":[257,352],"several":[261],"concrete":[262],"cryptosystems":[263],"such":[264],"as":[265],"round-reduced":[266],"CAST-128":[267],"(where":[268,296],"from":[273,301],"$$2^{111}":[274],"$$":[275],"<mml:mn>111</mml:mn>":[280],"$$2^{64}$$":[284],"<mml:mn>64</mml:mn>":[289],"DEAL-256":[295],"$$2^{200}$$":[302],"<mml:mn>200</mml:mn>":[307],"$$2^{144}$$":[311],"<mml:mn>144</mml:mn>":[316],"),":[319],"without":[320],"affecting":[321],"their":[322],"data":[325],"complexities.":[326],"An":[327],"extension":[328],"our":[330],"applies":[332],"even":[333],"some":[335],"non-Feistel":[336],"structures\u2014for":[337],"case":[341],"FOX,":[343],"all":[350],"factor":[357],"$$2^{16}$$":[359],"<mml:mn>16</mml:mn>":[364],".":[367]},"counts_by_year":[],"updated_date":"2026-08-11T07:18:39.950985","created_date":"2021-08-30T00:00:00"}