{"id":"https://openalex.org/W3021614215","doi":"https://doi.org/10.1007/s10623-020-00756-5","title":"Revisiting Gilbert\u2019s known-key distinguisher","display_name":"Revisiting Gilbert\u2019s known-key distinguisher","publication_year":2020,"publication_date":"2020-05-04","ids":{"openalex":"https://openalex.org/W3021614215","doi":"https://doi.org/10.1007/s10623-020-00756-5","mag":"3021614215"},"language":"en","primary_location":{"id":"doi:10.1007/s10623-020-00756-5","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10623-020-00756-5","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10623-020-00756-5.pdf","source":{"id":"https://openalex.org/S81616010","display_name":"Designs Codes and Cryptography","issn_l":"0925-1022","issn":["0925-1022","1573-7586"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Designs, Codes and Cryptography","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://link.springer.com/content/pdf/10.1007/s10623-020-00756-5.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5085134047","display_name":"Lorenzo Grassi","orcid":"https://orcid.org/0000-0003-1140-0520"},"institutions":[{"id":"https://openalex.org/I145872427","display_name":"Radboud University Nijmegen","ror":"https://ror.org/016xsfp80","country_code":"NL","type":"education","lineage":["https://openalex.org/I145872427"]},{"id":"https://openalex.org/I4092182","display_name":"Graz University of Technology","ror":"https://ror.org/00d7xrm67","country_code":"AT","type":"education","lineage":["https://openalex.org/I4092182"]},{"id":"https://openalex.org/I4210088621","display_name":"Know Center Research GmbH (Austria)","ror":"https://ror.org/004zhad81","country_code":"AT","type":"company","lineage":["https://openalex.org/I4210088621"]}],"countries":["AT","NL"],"is_corresponding":true,"raw_author_name":"Lorenzo Grassi","raw_affiliation_strings":["Digital Security Group, Radboud University, Nijmegen, The Netherlands","IAIK, Graz University of Technology, Graz, Austria","Know-Center, Graz, Austria"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Digital Security Group, Radboud University, Nijmegen, The Netherlands","institution_ids":["https://openalex.org/I145872427"]},{"raw_affiliation_string":"IAIK, Graz University of Technology, Graz, Austria","institution_ids":["https://openalex.org/I4092182"]},{"raw_affiliation_string":"Know-Center, Graz, Austria","institution_ids":["https://openalex.org/I4210088621"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5068575128","display_name":"Christian Rechberger","orcid":"https://orcid.org/0000-0003-1280-6020"},"institutions":[{"id":"https://openalex.org/I4092182","display_name":"Graz University of Technology","ror":"https://ror.org/00d7xrm67","country_code":"AT","type":"education","lineage":["https://openalex.org/I4092182"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Christian Rechberger","raw_affiliation_strings":["IAIK, Graz University of Technology, Graz, Austria"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"IAIK, Graz University of Technology, Graz, Austria","institution_ids":["https://openalex.org/I4092182"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5085134047"],"corresponding_institution_ids":["https://openalex.org/I145872427","https://openalex.org/I4092182","https://openalex.org/I4210088621"],"apc_list":{"value":2290,"currency":"EUR","value_usd":2890},"apc_paid":{"value":2290,"currency":"EUR","value_usd":2890},"fwci":0.5204,"has_fulltext":true,"cited_by_count":6,"citation_normalized_percentile":{"value":0.71993401,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":96},"biblio":{"volume":"88","issue":"7","first_page":"1401","last_page":"1445"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11017","display_name":"Chaos-based Image/Signal Encryption","score":0.9973999857902527,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11130","display_name":"Coding theory and cryptography","score":0.9955000281333923,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6783666610717773},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.5901191830635071},{"id":"https://openalex.org/keywords/hash-function","display_name":"Hash function","score":0.5899293422698975},{"id":"https://openalex.org/keywords/block-cipher","display_name":"Block cipher","score":0.5511835217475891},{"id":"https://openalex.org/keywords/intuition","display_name":"Intuition","score":0.524222731590271},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.5111568570137024},{"id":"https://openalex.org/keywords/cryptanalysis","display_name":"Cryptanalysis","score":0.5077158212661743},{"id":"https://openalex.org/keywords/extension","display_name":"Extension (predicate logic)","score":0.4433523416519165},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.30795910954475403},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.29209694266319275},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.2395070493221283},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.123758465051651},{"id":"https://openalex.org/keywords/epistemology","display_name":"Epistemology","score":0.09787502884864807},{"id":"https://openalex.org/keywords/philosophy","display_name":"Philosophy","score":0.08916649222373962}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6783666610717773},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.5901191830635071},{"id":"https://openalex.org/C99138194","wikidata":"https://www.wikidata.org/wiki/Q183427","display_name":"Hash function","level":2,"score":0.5899293422698975},{"id":"https://openalex.org/C106544461","wikidata":"https://www.wikidata.org/wiki/Q543151","display_name":"Block cipher","level":3,"score":0.5511835217475891},{"id":"https://openalex.org/C132010649","wikidata":"https://www.wikidata.org/wiki/Q189222","display_name":"Intuition","level":2,"score":0.524222731590271},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.5111568570137024},{"id":"https://openalex.org/C181149355","wikidata":"https://www.wikidata.org/wiki/Q897511","display_name":"Cryptanalysis","level":3,"score":0.5077158212661743},{"id":"https://openalex.org/C2778029271","wikidata":"https://www.wikidata.org/wiki/Q5421931","display_name":"Extension (predicate logic)","level":2,"score":0.4433523416519165},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.30795910954475403},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.29209694266319275},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2395070493221283},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.123758465051651},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.09787502884864807},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.08916649222373962}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1007/s10623-020-00756-5","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10623-020-00756-5","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10623-020-00756-5.pdf","source":{"id":"https://openalex.org/S81616010","display_name":"Designs Codes and Cryptography","issn_l":"0925-1022","issn":["0925-1022","1573-7586"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Designs, Codes and Cryptography","raw_type":"journal-article"},{"id":"pmh:ru:oai:repository.ubn.ru.nl:2066/221000","is_oa":true,"landing_page_url":"http://hdl.handle.net/2066/221000","pdf_url":"http://hdl.handle.net/2066/221000","source":{"id":"https://openalex.org/S4306401843","display_name":"Data Archiving and Networked Services (DANS)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1322597698","host_organization_name":"Royal Netherlands Academy of Arts and Sciences","host_organization_lineage":["https://openalex.org/I1322597698"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Designs, Codes and Cryptography, 88, 1401 - 1445","raw_type":"info:eu-repo/semantics/article"},{"id":"pmh:oai:repository.ubn.ru.nl:2066/221000","is_oa":false,"landing_page_url":"https://hdl.handle.net/2066/221000","pdf_url":null,"source":{"id":"https://openalex.org/S4306401067","display_name":"Radboud Repository (Radboud University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I145872427","host_organization_name":"Radboud University Nijmegen","host_organization_lineage":["https://openalex.org/I145872427"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Designs, Codes and Cryptography, 88, 7, pp. 1401-1445","raw_type":"Article / Letter to editor"}],"best_oa_location":{"id":"doi:10.1007/s10623-020-00756-5","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10623-020-00756-5","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10623-020-00756-5.pdf","source":{"id":"https://openalex.org/S81616010","display_name":"Designs Codes and Cryptography","issn_l":"0925-1022","issn":["0925-1022","1573-7586"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Designs, Codes and Cryptography","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320321013","display_name":"Radboud Universiteit","ror":"https://ror.org/016xsfp80"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3021614215.pdf","grobid_xml":"https://content.openalex.org/works/W3021614215.grobid-xml"},"referenced_works_count":31,"referenced_works":["https://openalex.org/W194875050","https://openalex.org/W1433390310","https://openalex.org/W1483908684","https://openalex.org/W1495653136","https://openalex.org/W1540366790","https://openalex.org/W1546987793","https://openalex.org/W1554865288","https://openalex.org/W1572300106","https://openalex.org/W1587120902","https://openalex.org/W1603433154","https://openalex.org/W1826962815","https://openalex.org/W1872817980","https://openalex.org/W2017422266","https://openalex.org/W2058289418","https://openalex.org/W2101800793","https://openalex.org/W2102210446","https://openalex.org/W2109265351","https://openalex.org/W2127005917","https://openalex.org/W2280111738","https://openalex.org/W2294358919","https://openalex.org/W2481818819","https://openalex.org/W2529842300","https://openalex.org/W2575957737","https://openalex.org/W2591966525","https://openalex.org/W2617904515","https://openalex.org/W2769426629","https://openalex.org/W2792542066","https://openalex.org/W2792916270","https://openalex.org/W2912272895","https://openalex.org/W4231852103","https://openalex.org/W4236635680"],"related_works":["https://openalex.org/W2513488822","https://openalex.org/W2309942439","https://openalex.org/W2001537715","https://openalex.org/W1521015940","https://openalex.org/W1771708738","https://openalex.org/W1821141891","https://openalex.org/W1509875874","https://openalex.org/W4312254418","https://openalex.org/W3021614215","https://openalex.org/W2139346651"],"abstract_inverted_index":{"Abstract":[0],"Known-key":[1],"distinguishers":[2,272],"have":[3],"been":[4],"introduced":[5],"by":[6,59,288,294],"Knudsen":[7],"and":[8,38,241,327],"Rijmen":[9],"in":[10,20,97,108,119,133,234,341,349],"2007":[11],"to":[12,29,43,48,114,125,152,211,217,252,300,346,369],"better":[13],"understand":[14],"the":[15,23,33,109,120,134,148,153,169,180,198,205,212,227,244,269,291,320,328,350,361,371],"security":[16],"of":[17,85,155,168,188,207,265,276,314,360],"block":[18],"ciphers":[19],"situations":[21],"where":[22],"key":[24],"can":[25,231,296],"not":[26,74],"be":[27,30,232,298,318],"considered":[28,81],"secret,":[31],"i.e.":[32],"\u201cthing":[34],"between":[35,323],"secret-key":[36,110],"model":[37,47,66,111,122,136,200,214,326,330,343,363],"hash":[39],"function":[40],"use-cases\u201d.":[41],"Trying":[42],"find":[44],"a":[45,64,83,131,223,263,302,358],"rigorous":[46],"fit":[49,279,370],"this":[50,76,173,315,354],"intuition":[51],"is":[52,70,79,163,201,215,286,331],"still":[53],"ongoing.":[54],"The":[55,283],"most":[56],"recent":[57],"advance":[58],"Gilbert":[60,128,295],"(Asiacrypt":[61],"2014)":[62],"describes":[63],"new":[65,170,199,213],"that\u2014even":[67],"if":[68],"it":[69,145,164],"well":[71],"justified\u2014seemingly":[72],"does":[73],"match":[75],"intuition.":[77,373],"AES":[78,90,277],"often":[80],"as":[82],"target":[84],"such":[86,235],"analyses,":[87],"simply":[88],"because":[89],"or":[91,162,190],"its":[92,366],"building":[93],"blocks":[94],"are":[95,158,193,249,260,344],"used":[96,299],"many":[98],"settings":[99],"that":[100,137,147,197,204,221,225,254,278,290,319,339],"go":[101],"beyond":[102],"classical":[103],"encryption.":[104],"Consider":[105],"AES-128.":[106],"Results":[107],"cover":[112],"up":[113,124],"6":[115],"rounds,":[116],"while":[117],"results":[118,340],"chosen-key":[121,329],"reach":[123],"9":[126],"rounds.":[127,143],"however":[129,337],"showed":[130],"result":[132,264],"known-key":[135,271,303,325,362],"goes":[138],"even":[139],"further,":[140],"covering":[141],"10":[142],"Does":[144],"mean":[146],"use":[149],"cases":[150],"corresponding":[151],"cryptanalysis":[154],"hash-function":[156],"use-cases":[157],"inherently":[159],"less":[160],"efficient,":[161],"rather":[165,191],"an":[166,347],"artifact":[167,348],"model?":[171],"In":[172,183],"paper":[174],"we":[175,248,267,356],"give":[176],"strong":[177],"evidence":[178],"for":[179],"latter":[181],".":[182],"Gilbert\u2019s":[184,281,324,342],"work,":[185],"two":[186,257],"types":[187],"arguments":[189],"conjectures":[192,240],"put":[194],"forward":[195],"suggesting":[196],"meaningful.":[202],"Firstly":[203],"number":[206],"\u201cextension":[208],"rounds\u201d":[209],"due":[210,345],"limited":[216],"two.":[218],"And":[219],"secondly":[220],"only":[222],"distinguisher":[224,304],"exploits":[226],"uniform":[228],"distribution":[229],"property":[230],"extended":[233],"way.":[236],"We":[237,336],"disprove":[238],"both":[239],"arrive":[242],"at":[243],"following":[245],"results:":[246],"First,":[247],"also":[250,297],"able":[251],"show":[253],"more":[255],"than":[256,333],"extension":[258],"rounds":[259,275],"possible.":[261],"As":[262],"this,":[266],"describe":[268],"first":[270],"on":[273,306],"12":[274],"into":[280],"model.":[282,351],"second":[284],"conjecture":[285],"disproven":[287],"showing":[289],"technique":[292],"proposed":[293],"extend":[301],"based":[305],"another":[307],"property:":[308],"truncated":[309],"differentials.":[310],"A":[311],"potential":[312],"conclusion":[313],"work":[316],"would":[317],"counter-intuitive":[321],"gap":[322],"wider":[332],"initially":[334],"thought.":[335],"conclude":[338],"To":[352],"remedy":[353],"situation,":[355],"propose":[357],"refinement":[359],"which":[364],"restores":[365],"original":[367,372],"intent":[368]},"counts_by_year":[{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":2}],"updated_date":"2026-07-02T09:51:11.867554","created_date":"2025-10-10T00:00:00"}
