{"id":"https://openalex.org/W3165463257","doi":"https://doi.org/10.1093/comjnl/bxab061","title":"Observations on the Security of COMET","display_name":"Observations on the Security of COMET","publication_year":2021,"publication_date":"2021-04-23","ids":{"openalex":"https://openalex.org/W3165463257","doi":"https://doi.org/10.1093/comjnl/bxab061","mag":"3165463257"},"language":"en","primary_location":{"id":"doi:10.1093/comjnl/bxab061","is_oa":false,"landing_page_url":"https://doi.org/10.1093/comjnl/bxab061","pdf_url":null,"source":{"id":"https://openalex.org/S44643521","display_name":"The Computer Journal","issn_l":"0010-4620","issn":["0010-4620","1460-2067"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310311648","host_organization_name":"Oxford University Press","host_organization_lineage":["https://openalex.org/P4310311648","https://openalex.org/P4310311647"],"host_organization_lineage_names":["Oxford University Press","University of Oxford"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"The Computer Journal","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5005610147","display_name":"Zheng Xu","orcid":"https://orcid.org/0000-0002-9735-8409"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zheng Xu","raw_affiliation_strings":["School of Cyber Security , University of Chinese Academy of Sciences, Beijing 100049, China","State Key Laboratory of Information Security , Institute of Information Engineering, Chinese Academy of Sciences, Beijing 100089, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyber Security , University of Chinese Academy of Sciences, Beijing 100049, China","institution_ids":["https://openalex.org/I4210165038"]},{"raw_affiliation_string":"State Key Laboratory of Information Security , Institute of Information Engineering, Chinese Academy of Sciences, Beijing 100089, China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100462231","display_name":"Yongqiang Li","orcid":"https://orcid.org/0000-0002-2551-2737"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Yongqiang Li","raw_affiliation_strings":["School of Cyber Security , University of Chinese Academy of Sciences, Beijing 100049, China","State Key Laboratory of Information Security , Institute of Information Engineering, Chinese Academy of Sciences, Beijing 100089, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyber Security , University of Chinese Academy of Sciences, Beijing 100049, China","institution_ids":["https://openalex.org/I4210165038"]},{"raw_affiliation_string":"State Key Laboratory of Information Security , Institute of Information Engineering, Chinese Academy of Sciences, Beijing 100089, China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5108047865","display_name":"Ming\u2010Sheng Wang","orcid":"https://orcid.org/0000-0002-2400-719X"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Mingsheng Wang","raw_affiliation_strings":["School of Cyber Security , University of Chinese Academy of Sciences, Beijing 100049, China","State Key Laboratory of Information Security , Institute of Information Engineering, Chinese Academy of Sciences, Beijing 100089, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyber Security , University of Chinese Academy of Sciences, Beijing 100049, China","institution_ids":["https://openalex.org/I4210165038"]},{"raw_affiliation_string":"State Key Laboratory of Information Security , Institute of Information Engineering, Chinese Academy of Sciences, Beijing 100089, China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5100462231"],"corresponding_institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404","https://openalex.org/I4210165038"],"apc_list":{"value":2635,"currency":"GBP","value_usd":3232},"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.06838729,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"65","issue":"9","first_page":"2247","last_page":"2261"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11017","display_name":"Chaos-based Image/Signal Encryption","score":0.9975000023841858,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11130","display_name":"Coding theory and cryptography","score":0.9919999837875366,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/block-cipher","display_name":"Block cipher","score":0.8437615036964417},{"id":"https://openalex.org/keywords/comet","display_name":"Comet","score":0.7748386859893799},{"id":"https://openalex.org/keywords/differential-cryptanalysis","display_name":"Differential cryptanalysis","score":0.7328854203224182},{"id":"https://openalex.org/keywords/permutation","display_name":"Permutation (music)","score":0.6181793808937073},{"id":"https://openalex.org/keywords/linear-cryptanalysis","display_name":"Linear cryptanalysis","score":0.5779990553855896},{"id":"https://openalex.org/keywords/random-permutation","display_name":"Random permutation","score":0.5567008256912231},{"id":"https://openalex.org/keywords/impossible-differential-cryptanalysis","display_name":"Impossible differential cryptanalysis","score":0.5380110144615173},{"id":"https://openalex.org/keywords/higher-order-differential-cryptanalysis","display_name":"Higher-order differential cryptanalysis","score":0.5370326042175293},{"id":"https://openalex.org/keywords/differential","display_name":"Differential (mechanical device)","score":0.5199400186538696},{"id":"https://openalex.org/keywords/cryptographic-nonce","display_name":"Cryptographic nonce","score":0.459663987159729},{"id":"https://openalex.org/keywords/cryptanalysis","display_name":"Cryptanalysis","score":0.41540294885635376},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.3960045576095581},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.39441823959350586},{"id":"https://openalex.org/keywords/physics","display_name":"Physics","score":0.3882591724395752},{"id":"https://openalex.org/keywords/block","display_name":"Block (permutation group theory)","score":0.37775182723999023},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.3710480332374573},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.3656935691833496},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.33347994089126587},{"id":"https://openalex.org/keywords/combinatorics","display_name":"Combinatorics","score":0.32379525899887085},{"id":"https://openalex.org/keywords/astrophysics","display_name":"Astrophysics","score":0.26754626631736755},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.2072976529598236}],"concepts":[{"id":"https://openalex.org/C106544461","wikidata":"https://www.wikidata.org/wiki/Q543151","display_name":"Block cipher","level":3,"score":0.8437615036964417},{"id":"https://openalex.org/C94081185","wikidata":"https://www.wikidata.org/wiki/Q3559","display_name":"Comet","level":2,"score":0.7748386859893799},{"id":"https://openalex.org/C36123800","wikidata":"https://www.wikidata.org/wiki/Q1224471","display_name":"Differential cryptanalysis","level":4,"score":0.7328854203224182},{"id":"https://openalex.org/C21308566","wikidata":"https://www.wikidata.org/wiki/Q7169365","display_name":"Permutation (music)","level":2,"score":0.6181793808937073},{"id":"https://openalex.org/C82424418","wikidata":"https://www.wikidata.org/wiki/Q1826463","display_name":"Linear cryptanalysis","level":4,"score":0.5779990553855896},{"id":"https://openalex.org/C200985842","wikidata":"https://www.wikidata.org/wiki/Q3375503","display_name":"Random permutation","level":3,"score":0.5567008256912231},{"id":"https://openalex.org/C120488936","wikidata":"https://www.wikidata.org/wiki/Q3005748","display_name":"Impossible differential cryptanalysis","level":5,"score":0.5380110144615173},{"id":"https://openalex.org/C151607707","wikidata":"https://www.wikidata.org/wiki/Q11673206","display_name":"Higher-order differential cryptanalysis","level":5,"score":0.5370326042175293},{"id":"https://openalex.org/C93226319","wikidata":"https://www.wikidata.org/wiki/Q193137","display_name":"Differential (mechanical device)","level":2,"score":0.5199400186538696},{"id":"https://openalex.org/C9996903","wikidata":"https://www.wikidata.org/wiki/Q1749235","display_name":"Cryptographic nonce","level":3,"score":0.459663987159729},{"id":"https://openalex.org/C181149355","wikidata":"https://www.wikidata.org/wiki/Q897511","display_name":"Cryptanalysis","level":3,"score":0.41540294885635376},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.3960045576095581},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.39441823959350586},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.3882591724395752},{"id":"https://openalex.org/C2777210771","wikidata":"https://www.wikidata.org/wiki/Q4927124","display_name":"Block (permutation group theory)","level":2,"score":0.37775182723999023},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.3710480332374573},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.3656935691833496},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.33347994089126587},{"id":"https://openalex.org/C114614502","wikidata":"https://www.wikidata.org/wiki/Q76592","display_name":"Combinatorics","level":1,"score":0.32379525899887085},{"id":"https://openalex.org/C44870925","wikidata":"https://www.wikidata.org/wiki/Q37547","display_name":"Astrophysics","level":1,"score":0.26754626631736755},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2072976529598236},{"id":"https://openalex.org/C97355855","wikidata":"https://www.wikidata.org/wiki/Q11473","display_name":"Thermodynamics","level":1,"score":0.0},{"id":"https://openalex.org/C24890656","wikidata":"https://www.wikidata.org/wiki/Q82811","display_name":"Acoustics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1093/comjnl/bxab061","is_oa":false,"landing_page_url":"https://doi.org/10.1093/comjnl/bxab061","pdf_url":null,"source":{"id":"https://openalex.org/S44643521","display_name":"The Computer Journal","issn_l":"0010-4620","issn":["0010-4620","1460-2067"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310311648","host_organization_name":"Oxford University Press","host_organization_lineage":["https://openalex.org/P4310311648","https://openalex.org/P4310311647"],"host_organization_lineage_names":["Oxford University Press","University of Oxford"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"The Computer Journal","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G6441528267","display_name":"\u5bf9\u79f0\u5bc6\u7801\u7b97\u6cd5\u5173\u952e\u90e8\u4ef6\u7684\u8bbe\u8ba1\u95ee\u9898\u7814\u7a76","funder_award_id":"61772517","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G650542847","display_name":"\u57fa\u4e8eARX\u7ed3\u6784\u7684\u8f7b\u91cf\u5bc6\u7801\u7b97\u6cd5\u7684\u5bc6\u7801\u5206\u6790\u7814\u7a76","funder_award_id":"61772516","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320322847","display_name":"Youth Innovation Promotion Association of the Chinese Academy of Sciences","ror":"https://ror.org/031141b54"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":26,"referenced_works":["https://openalex.org/W1427832936","https://openalex.org/W1629301835","https://openalex.org/W2181873030","https://openalex.org/W2407532539","https://openalex.org/W2978732305","https://openalex.org/W3013943754","https://openalex.org/W3030624396","https://openalex.org/W3109426433","https://openalex.org/W3109697674","https://openalex.org/W3210705930","https://openalex.org/W4230325126","https://openalex.org/W4238341678","https://openalex.org/W6612550490","https://openalex.org/W6613066373","https://openalex.org/W6630277499","https://openalex.org/W6679245075","https://openalex.org/W6723248222","https://openalex.org/W6749011078","https://openalex.org/W6752113353","https://openalex.org/W6753557757","https://openalex.org/W6757828021","https://openalex.org/W6773917909","https://openalex.org/W6775857532","https://openalex.org/W6778727884","https://openalex.org/W6786226432","https://openalex.org/W6802795133"],"related_works":["https://openalex.org/W1539170589","https://openalex.org/W2069489561","https://openalex.org/W2909134104","https://openalex.org/W1983617130","https://openalex.org/W1776585907","https://openalex.org/W2040491264","https://openalex.org/W3029769845","https://openalex.org/W2405965988","https://openalex.org/W3165463257","https://openalex.org/W2616580653"],"abstract_inverted_index":{"Abstract":[0],"This":[1],"paper":[2],"investigates":[3],"the":[4,16,43,73,87,152,158,166,175,182,193,206,210],"security":[5,207],"of":[6,15,23,42,91,101,135,154,209],"counter":[7],"mode":[8],"encryption":[9],"with":[10,56,116,132,157,181],"authentication":[11],"tag":[12],"(COMET),":[13],"one":[14,41],"32":[17],"second-round":[18],"candidates":[19],"in":[20,47],"National":[21],"Institute":[22],"Standards":[24],"and":[25,52,161],"Technology\u2019s":[26],"lightweight":[27],"cryptography":[28],"standardization":[29],"process,":[30],"against":[31],"differential":[32,54,76,89,114,130,163,169],"cryptanalysis.":[33],"CHAM-64/128":[34,61,79,138,142],"is":[35,62,86,93],"a":[36,53,57,98,113,117,133,144],"block":[37,45,105],"cipher":[38,106],"chosen":[39],"as":[40,165],"underlying":[44],"ciphers":[46],"COMET":[48,180],"for":[49,60,64,78,137],"hardware-oriented":[50],"applications,":[51],"characteristic":[55,77,90,115],"high":[58],"probability":[59,118,134],"useful":[63],"forgery":[65,177,190],"attacks":[66,178,191],"on":[67,179],"COMET.":[68],"However,":[69],"we":[70,96,126,150,173],"find":[71],"that":[72,200],"optimal":[74],"$\\mathbf{39}$-round":[75,129,168],"proposed":[80],"by":[81],"Roh":[82],"et":[83],"al.,":[84],"which":[85],"longest":[88],"CHAM-64/128,":[92],"invalid.":[94],"Then,":[95],"propose":[97],"new":[99],"method":[100],"distinguishing":[102],"an":[103,108],"$\\mathbf{m}$-bit":[104,109],"from":[107,143],"random":[110,146],"permutation":[111],"using":[112,186],"not":[119,204],"higher":[120],"than":[121],"$\\mathbf{2^{-m}}$.":[122],"Using":[123],"our":[124],"method,":[125],"use":[127],"two":[128,155,167,183],"characteristics":[131],"$\\mathbf{2^{-64}}$":[136],"to":[139],"distinguish":[140],"$\\mathbf{39}$-round-reduced":[141],"$\\mathbf{64}$-bit":[145],"permutation,":[147],"respectively.":[148,171],"Furthermore,":[149],"refine":[151],"probabilities":[153],"differentials":[156,184],"same":[159],"input":[160],"output":[162],"masks":[164],"characteristics,":[170],"Finally,":[172],"present":[174],"first":[176],"without":[185],"weak":[187],"keys.":[188],"Our":[189],"follow":[192],"nonce-misuse":[194],"scenario.":[195],"It":[196],"should":[197],"be":[198],"noticed":[199],"this":[201],"attack":[202],"does":[203],"invalidate":[205],"claims":[208],"designers.":[211]},"counts_by_year":[],"updated_date":"2026-07-22T07:51:19.307946","created_date":"2025-10-10T00:00:00"}