{"id":"https://openalex.org/W3198953457","doi":"https://doi.org/10.1007/s12095-021-00535-6","title":"Attacking the linear congruential generator on elliptic curves via lattice techniques","display_name":"Attacking the linear congruential generator on elliptic curves via lattice techniques","publication_year":2021,"publication_date":"2021-09-12","ids":{"openalex":"https://openalex.org/W3198953457","doi":"https://doi.org/10.1007/s12095-021-00535-6","mag":"3198953457"},"language":"en","primary_location":{"id":"doi:10.1007/s12095-021-00535-6","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s12095-021-00535-6","pdf_url":"https://link.springer.com/content/pdf/10.1007/s12095-021-00535-6.pdf","source":{"id":"https://openalex.org/S129219326","display_name":"Cryptography and Communications","issn_l":"1936-2447","issn":["1936-2447","1936-2455"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cryptography and Communications","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://link.springer.com/content/pdf/10.1007/s12095-021-00535-6.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5006984722","display_name":"Jaime Guti\u00e9rrez","orcid":"https://orcid.org/0000-0003-1892-3084"},"institutions":[{"id":"https://openalex.org/I13134134","display_name":"Universidad de Cantabria","ror":"https://ror.org/046ffzj20","country_code":"ES","type":"education","lineage":["https://openalex.org/I13134134"]}],"countries":["ES"],"is_corresponding":true,"raw_author_name":"Jaime Gutierrez","raw_affiliation_strings":["University of Cantabria, E-39005, Santander, Spain"],"affiliations":[{"raw_affiliation_string":"University of Cantabria, E-39005, Santander, Spain","institution_ids":["https://openalex.org/I13134134"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5006984722"],"corresponding_institution_ids":["https://openalex.org/I13134134"],"apc_list":{"value":2290,"currency":"EUR","value_usd":2890},"apc_paid":{"value":2290,"currency":"EUR","value_usd":2890},"fwci":2.5547,"has_fulltext":true,"cited_by_count":12,"citation_normalized_percentile":{"value":0.91243641,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":95,"max":99},"biblio":{"volume":"14","issue":"3","first_page":"505","last_page":"525"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11693","display_name":"Cryptography and Residue Arithmetic","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11693","display_name":"Cryptography and Residue Arithmetic","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9987999796867371,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9940000176429749,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/supersingular-elliptic-curve","display_name":"Supersingular elliptic curve","score":0.6027787923812866},{"id":"https://openalex.org/keywords/linear-congruential-generator","display_name":"Linear congruential generator","score":0.5894306898117065},{"id":"https://openalex.org/keywords/pseudorandom-number-generator","display_name":"Pseudorandom number generator","score":0.5816273093223572},{"id":"https://openalex.org/keywords/elliptic-curve","display_name":"Elliptic curve","score":0.5472466945648193},{"id":"https://openalex.org/keywords/lattice","display_name":"Lattice (music)","score":0.5403341054916382},{"id":"https://openalex.org/keywords/lattice-based-cryptography","display_name":"Lattice-based cryptography","score":0.5268598794937134},{"id":"https://openalex.org/keywords/schoofs-algorithm","display_name":"Schoof's algorithm","score":0.5198388695716858},{"id":"https://openalex.org/keywords/lattice-reduction","display_name":"Lattice reduction","score":0.5171784162521362},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.499492883682251},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.49248823523521423},{"id":"https://openalex.org/keywords/pseudorandomness","display_name":"Pseudorandomness","score":0.45995935797691345},{"id":"https://openalex.org/keywords/generator","display_name":"Generator (circuit theory)","score":0.45872992277145386},{"id":"https://openalex.org/keywords/nonlinear-system","display_name":"Nonlinear system","score":0.45556309819221497},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.41254520416259766},{"id":"https://openalex.org/keywords/discrete-mathematics","display_name":"Discrete mathematics","score":0.3542460799217224},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.346083402633667},{"id":"https://openalex.org/keywords/pure-mathematics","display_name":"Pure mathematics","score":0.22970187664031982},{"id":"https://openalex.org/keywords/statistics","display_name":"Statistics","score":0.10145372152328491},{"id":"https://openalex.org/keywords/physics","display_name":"Physics","score":0.0951930582523346},{"id":"https://openalex.org/keywords/magnet","display_name":"Magnet","score":0.07879561185836792}],"concepts":[{"id":"https://openalex.org/C157567686","wikidata":"https://www.wikidata.org/wiki/Q7644139","display_name":"Supersingular elliptic curve","level":3,"score":0.6027787923812866},{"id":"https://openalex.org/C141890704","wikidata":"https://www.wikidata.org/wiki/Q1190228","display_name":"Linear congruential generator","level":3,"score":0.5894306898117065},{"id":"https://openalex.org/C140642157","wikidata":"https://www.wikidata.org/wiki/Q1623338","display_name":"Pseudorandom number generator","level":2,"score":0.5816273093223572},{"id":"https://openalex.org/C179603306","wikidata":"https://www.wikidata.org/wiki/Q268493","display_name":"Elliptic curve","level":2,"score":0.5472466945648193},{"id":"https://openalex.org/C2781204021","wikidata":"https://www.wikidata.org/wiki/Q6497091","display_name":"Lattice (music)","level":2,"score":0.5403341054916382},{"id":"https://openalex.org/C137660015","wikidata":"https://www.wikidata.org/wiki/Q6497083","display_name":"Lattice-based cryptography","level":5,"score":0.5268598794937134},{"id":"https://openalex.org/C121444067","wikidata":"https://www.wikidata.org/wiki/Q2835817","display_name":"Schoof's algorithm","level":4,"score":0.5198388695716858},{"id":"https://openalex.org/C44274781","wikidata":"https://www.wikidata.org/wiki/Q6497132","display_name":"Lattice reduction","level":4,"score":0.5171784162521362},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.499492883682251},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.49248823523521423},{"id":"https://openalex.org/C19086982","wikidata":"https://www.wikidata.org/wiki/Q2115856","display_name":"Pseudorandomness","level":3,"score":0.45995935797691345},{"id":"https://openalex.org/C2780992000","wikidata":"https://www.wikidata.org/wiki/Q17016113","display_name":"Generator (circuit theory)","level":3,"score":0.45872992277145386},{"id":"https://openalex.org/C158622935","wikidata":"https://www.wikidata.org/wiki/Q660848","display_name":"Nonlinear system","level":2,"score":0.45556309819221497},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.41254520416259766},{"id":"https://openalex.org/C118615104","wikidata":"https://www.wikidata.org/wiki/Q121416","display_name":"Discrete mathematics","level":1,"score":0.3542460799217224},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.346083402633667},{"id":"https://openalex.org/C202444582","wikidata":"https://www.wikidata.org/wiki/Q837863","display_name":"Pure mathematics","level":1,"score":0.22970187664031982},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.10145372152328491},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0951930582523346},{"id":"https://openalex.org/C16389437","wikidata":"https://www.wikidata.org/wiki/Q11421","display_name":"Magnet","level":2,"score":0.07879561185836792},{"id":"https://openalex.org/C197875053","wikidata":"https://www.wikidata.org/wiki/Q7269266","display_name":"Quarter period","level":3,"score":0.0},{"id":"https://openalex.org/C169699857","wikidata":"https://www.wikidata.org/wiki/Q2122243","display_name":"Quantum information","level":3,"score":0.0},{"id":"https://openalex.org/C163258240","wikidata":"https://www.wikidata.org/wiki/Q25342","display_name":"Power (physics)","level":2,"score":0.0},{"id":"https://openalex.org/C144901912","wikidata":"https://www.wikidata.org/wiki/Q471906","display_name":"Quantum cryptography","level":4,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C84114770","wikidata":"https://www.wikidata.org/wiki/Q46344","display_name":"Quantum","level":2,"score":0.0},{"id":"https://openalex.org/C54197355","wikidata":"https://www.wikidata.org/wiki/Q5782992","display_name":"Beamforming","level":2,"score":0.0},{"id":"https://openalex.org/C24890656","wikidata":"https://www.wikidata.org/wiki/Q82811","display_name":"Acoustics","level":1,"score":0.0},{"id":"https://openalex.org/C207987634","wikidata":"https://www.wikidata.org/wiki/Q176862","display_name":"MIMO","level":3,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1007/s12095-021-00535-6","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s12095-021-00535-6","pdf_url":"https://link.springer.com/content/pdf/10.1007/s12095-021-00535-6.pdf","source":{"id":"https://openalex.org/S129219326","display_name":"Cryptography and Communications","issn_l":"1936-2447","issn":["1936-2447","1936-2455"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cryptography and Communications","raw_type":"journal-article"},{"id":"pmh:oai:repositorio.unican.es:10902/24935","is_oa":true,"landing_page_url":"http://hdl.handle.net/10902/24935","pdf_url":null,"source":{"id":"https://openalex.org/S4306400398","display_name":"UCrea (University of Cantabria)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I13134134","host_organization_name":"Universidad de Cantabria","host_organization_lineage":["https://openalex.org/I13134134"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Cryptography and Communications, 2022, 14(3), 505-525","raw_type":"info:eu-repo/semantics/article"}],"best_oa_location":{"id":"doi:10.1007/s12095-021-00535-6","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s12095-021-00535-6","pdf_url":"https://link.springer.com/content/pdf/10.1007/s12095-021-00535-6.pdf","source":{"id":"https://openalex.org/S129219326","display_name":"Cryptography and Communications","issn_l":"1936-2447","issn":["1936-2447","1936-2455"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cryptography and Communications","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320323808","display_name":"Universidad de Cantabria","ror":"https://ror.org/046ffzj20"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3198953457.pdf","grobid_xml":"https://content.openalex.org/works/W3198953457.grobid-xml"},"referenced_works_count":47,"referenced_works":["https://openalex.org/W239595814","https://openalex.org/W1486898453","https://openalex.org/W1493424669","https://openalex.org/W1508193711","https://openalex.org/W1512848798","https://openalex.org/W1532520539","https://openalex.org/W1536961397","https://openalex.org/W1537173196","https://openalex.org/W1537812362","https://openalex.org/W1545473754","https://openalex.org/W1551926475","https://openalex.org/W1562208741","https://openalex.org/W1592482282","https://openalex.org/W1785550107","https://openalex.org/W1841270112","https://openalex.org/W1961022628","https://openalex.org/W1981326822","https://openalex.org/W1999938992","https://openalex.org/W2011565494","https://openalex.org/W2018624813","https://openalex.org/W2026129593","https://openalex.org/W2039611463","https://openalex.org/W2075491429","https://openalex.org/W2080017147","https://openalex.org/W2082177344","https://openalex.org/W2087244305","https://openalex.org/W2088708578","https://openalex.org/W2100440346","https://openalex.org/W2101040389","https://openalex.org/W2111416661","https://openalex.org/W2130614344","https://openalex.org/W2134863191","https://openalex.org/W2141040012","https://openalex.org/W2142040177","https://openalex.org/W2144560442","https://openalex.org/W2147906334","https://openalex.org/W2464722507","https://openalex.org/W2501021435","https://openalex.org/W2514154808","https://openalex.org/W2972588704","https://openalex.org/W3005987222","https://openalex.org/W3021926571","https://openalex.org/W4212894907","https://openalex.org/W4220798063","https://openalex.org/W4241202974","https://openalex.org/W4292027090","https://openalex.org/W4293860921"],"related_works":["https://openalex.org/W2054944103","https://openalex.org/W2161451071","https://openalex.org/W1994207320","https://openalex.org/W2011090873","https://openalex.org/W147864474","https://openalex.org/W2055489884","https://openalex.org/W4205806207","https://openalex.org/W1505452726","https://openalex.org/W1972193539","https://openalex.org/W3198953457"],"abstract_inverted_index":{"Abstract":[0],"In":[1],"this":[2],"paper":[3],"we":[4],"study":[5],"the":[6,14,26,31,39,47,50,54,57,76],"linear":[7],"congruential":[8,98],"generator":[9],"on":[10,66],"elliptic":[11,58],"curves":[12],"from":[13],"cryptographic":[15],"point":[16],"of":[17,25,30,34,38,75,84,106],"view.":[18],"We":[19,80],"show":[20],"that":[21],"if":[22],"sufficiently":[23],"many":[24],"most":[27],"significant":[28],"bits":[29],"composer":[32,51],"and":[33,49,70],"three":[35],"consecutive":[36],"values":[37],"sequence":[40],"are":[41,64,102],"given,":[42],"then":[43],"one":[44],"can":[45],"recover":[46],"seed":[48],"(even":[52],"in":[53],"case":[55],"where":[56],"curve":[59],"is":[60],"private).":[61],"The":[62],"results":[63],"based":[65],"lattice":[67],"reduction":[68],"techniques":[69],"improve":[71],"some":[72,85],"recent":[73],"approaches":[74],"same":[77],"security":[78],"problem.":[79],"also":[81],"estimate":[82],"limits":[83],"heuristic":[86],"approaches,":[87],"which":[88],"still":[89],"remain":[90],"much":[91],"weaker":[92],"than":[93],"those":[94],"known":[95],"for":[96],"nonlinear":[97],"generators.":[99],"Several":[100],"examples":[101],"tested":[103],"using":[104],"implementations":[105],"ours":[107],"algorithms.":[108]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":3},{"year":2022,"cited_by_count":3}],"updated_date":"2026-03-20T23:20:44.827607","created_date":"2025-10-10T00:00:00"}