{"id":"https://openalex.org/W4315701804","doi":"https://doi.org/10.1093/comjnl/bxac173","title":"A New Approach of Evaluating the Security Against Differential and Linear Cryptanalysis and Its Applications to Serpent, NOEKEON and ASCON","display_name":"A New Approach of Evaluating the Security Against Differential and Linear Cryptanalysis and Its Applications to Serpent, NOEKEON and ASCON","publication_year":2023,"publication_date":"2023-01-10","ids":{"openalex":"https://openalex.org/W4315701804","doi":"https://doi.org/10.1093/comjnl/bxac173"},"language":"en","primary_location":{"id":"doi:10.1093/comjnl/bxac173","is_oa":false,"landing_page_url":"https://doi.org/10.1093/comjnl/bxac173","pdf_url":null,"source":{"id":"https://openalex.org/S44643521","display_name":"The Computer Journal","issn_l":"0010-4620","issn":["0010-4620","1460-2067"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310311648","host_organization_name":"Oxford University Press","host_organization_lineage":["https://openalex.org/P4310311648","https://openalex.org/P4310311647"],"host_organization_lineage_names":["Oxford University Press","University of Oxford"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"The Computer Journal","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5072480567","display_name":"Chunning Zhou","orcid":"https://orcid.org/0000-0002-0986-3609"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chunning Zhou","raw_affiliation_strings":["School of Cyber Security, University of Chinese Academy of Sciences , Beijing 100049 , China","State Key Laboratory of Information Security, Institute of Information Engineering, Chinese Academy of Sciences , Beijing 100085 , China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyber Security, University of Chinese Academy of Sciences , Beijing 100049 , China","institution_ids":["https://openalex.org/I4210165038"]},{"raw_affiliation_string":"State Key Laboratory of Information Security, Institute of Information Engineering, Chinese Academy of Sciences , Beijing 100085 , China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100459879","display_name":"Wentao Zhang","orcid":"https://orcid.org/0000-0003-4869-6564"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Wentao Zhang","raw_affiliation_strings":["School of Cyber Security, University of Chinese Academy of Sciences , Beijing 100049 , China","State Key Laboratory of Information Security, Institute of Information Engineering, Chinese Academy of Sciences , Beijing 100085 , China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyber Security, University of Chinese Academy of Sciences , Beijing 100049 , China","institution_ids":["https://openalex.org/I4210165038"]},{"raw_affiliation_string":"State Key Laboratory of Information Security, Institute of Information Engineering, Chinese Academy of Sciences , Beijing 100085 , China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101985834","display_name":"Weiwei Cao","orcid":"https://orcid.org/0000-0002-8991-9915"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Weiwei Cao","raw_affiliation_strings":["School of Cyber Security, University of Chinese Academy of Sciences , Beijing 100049 , China","State Key Laboratory of Information Security, Institute of Information Engineering, Chinese Academy of Sciences , Beijing 100085 , China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyber Security, University of Chinese Academy of Sciences , Beijing 100049 , China","institution_ids":["https://openalex.org/I4210165038"]},{"raw_affiliation_string":"State Key Laboratory of Information Security, Institute of Information Engineering, Chinese Academy of Sciences , Beijing 100085 , China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5100459879"],"corresponding_institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404","https://openalex.org/I4210165038"],"apc_list":{"value":2635,"currency":"GBP","value_usd":3232},"apc_paid":null,"fwci":0.2637,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.61141597,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":97},"biblio":{"volume":"67","issue":"1","first_page":"274","last_page":"291"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.9958000183105469,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11017","display_name":"Chaos-based Image/Signal Encryption","score":0.9878000020980835,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/linear-cryptanalysis","display_name":"Linear cryptanalysis","score":0.8250052332878113},{"id":"https://openalex.org/keywords/serpent","display_name":"Serpent (symbolism)","score":0.739389181137085},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6349421739578247},{"id":"https://openalex.org/keywords/higher-order-differential-cryptanalysis","display_name":"Higher-order differential cryptanalysis","score":0.6326297521591187},{"id":"https://openalex.org/keywords/linear-programming","display_name":"Linear programming","score":0.5768450498580933},{"id":"https://openalex.org/keywords/differential","display_name":"Differential (mechanical device)","score":0.5766795873641968},{"id":"https://openalex.org/keywords/cryptanalysis","display_name":"Cryptanalysis","score":0.513403058052063},{"id":"https://openalex.org/keywords/block-cipher","display_name":"Block cipher","score":0.5096304416656494},{"id":"https://openalex.org/keywords/differential-cryptanalysis","display_name":"Differential cryptanalysis","score":0.48688259720802307},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.47063183784484863},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.4641842246055603},{"id":"https://openalex.org/keywords/integer-programming","display_name":"Integer programming","score":0.4197113811969757},{"id":"https://openalex.org/keywords/mathematical-optimization","display_name":"Mathematical optimization","score":0.4010748565196991},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.34167516231536865},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.331650972366333}],"concepts":[{"id":"https://openalex.org/C82424418","wikidata":"https://www.wikidata.org/wiki/Q1826463","display_name":"Linear cryptanalysis","level":4,"score":0.8250052332878113},{"id":"https://openalex.org/C64001112","wikidata":"https://www.wikidata.org/wiki/Q721221","display_name":"Serpent (symbolism)","level":2,"score":0.739389181137085},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6349421739578247},{"id":"https://openalex.org/C151607707","wikidata":"https://www.wikidata.org/wiki/Q11673206","display_name":"Higher-order differential cryptanalysis","level":5,"score":0.6326297521591187},{"id":"https://openalex.org/C41045048","wikidata":"https://www.wikidata.org/wiki/Q202843","display_name":"Linear programming","level":2,"score":0.5768450498580933},{"id":"https://openalex.org/C93226319","wikidata":"https://www.wikidata.org/wiki/Q193137","display_name":"Differential (mechanical device)","level":2,"score":0.5766795873641968},{"id":"https://openalex.org/C181149355","wikidata":"https://www.wikidata.org/wiki/Q897511","display_name":"Cryptanalysis","level":3,"score":0.513403058052063},{"id":"https://openalex.org/C106544461","wikidata":"https://www.wikidata.org/wiki/Q543151","display_name":"Block cipher","level":3,"score":0.5096304416656494},{"id":"https://openalex.org/C36123800","wikidata":"https://www.wikidata.org/wiki/Q1224471","display_name":"Differential cryptanalysis","level":4,"score":0.48688259720802307},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.47063183784484863},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.4641842246055603},{"id":"https://openalex.org/C56086750","wikidata":"https://www.wikidata.org/wiki/Q6042592","display_name":"Integer programming","level":2,"score":0.4197113811969757},{"id":"https://openalex.org/C126255220","wikidata":"https://www.wikidata.org/wiki/Q141495","display_name":"Mathematical optimization","level":1,"score":0.4010748565196991},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.34167516231536865},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.331650972366333},{"id":"https://openalex.org/C95457728","wikidata":"https://www.wikidata.org/wiki/Q309","display_name":"History","level":0,"score":0.0},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.0},{"id":"https://openalex.org/C146978453","wikidata":"https://www.wikidata.org/wiki/Q3798668","display_name":"Aerospace engineering","level":1,"score":0.0},{"id":"https://openalex.org/C166957645","wikidata":"https://www.wikidata.org/wiki/Q23498","display_name":"Archaeology","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1093/comjnl/bxac173","is_oa":false,"landing_page_url":"https://doi.org/10.1093/comjnl/bxac173","pdf_url":null,"source":{"id":"https://openalex.org/S44643521","display_name":"The Computer Journal","issn_l":"0010-4620","issn":["0010-4620","1460-2067"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310311648","host_organization_name":"Oxford University Press","host_organization_lineage":["https://openalex.org/P4310311648","https://openalex.org/P4310311647"],"host_organization_lineage_names":["Oxford University Press","University of Oxford"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"The Computer Journal","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G8771030716","display_name":null,"funder_award_id":"61379138","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":21,"referenced_works":["https://openalex.org/W45372631","https://openalex.org/W585842345","https://openalex.org/W596114482","https://openalex.org/W596969860","https://openalex.org/W1518029257","https://openalex.org/W1629301835","https://openalex.org/W1894646615","https://openalex.org/W1974690417","https://openalex.org/W2281317404","https://openalex.org/W2920591362","https://openalex.org/W3013007656","https://openalex.org/W3030624396","https://openalex.org/W3097184403","https://openalex.org/W3150439629","https://openalex.org/W3200082646","https://openalex.org/W3203526008","https://openalex.org/W6695095835","https://openalex.org/W6760099854","https://openalex.org/W6775033736","https://openalex.org/W6778727884","https://openalex.org/W6802421668"],"related_works":["https://openalex.org/W2557174342","https://openalex.org/W1558609276","https://openalex.org/W1846045953","https://openalex.org/W2614647605","https://openalex.org/W2786560893","https://openalex.org/W2176792445","https://openalex.org/W1849484603","https://openalex.org/W1907974733","https://openalex.org/W4378376555","https://openalex.org/W1601440354"],"abstract_inverted_index":{"Abstract":[0],"In":[1,292],"recent":[2],"years,":[3],"Mixed-Integer":[4],"Linear":[5],"Programming":[6],"(MILP)-based":[7],"automatic":[8],"tools":[9,44],"have":[10,36],"played":[11],"a":[12,38,95,127,158,273,303],"significant":[13],"role":[14],"in":[15,41,45,164],"providing":[16],"security":[17,106,206],"evaluations":[18],"of":[19,73,112,117,129,137,161,174,237,241,306,321,326],"symmetric-key":[20],"primitives.":[21,114],"Differential":[22],"and":[23,61,78,109,132,182,200,210,219,223,228,249],"linear":[24,110,211,224],"cryptanalysis":[25,111,212],"are":[26,83],"the":[27,79,105,123,134,138,144,204,234,238,252,289,315,322],"two":[28],"most":[29],"important":[30],"cryptographic":[31],"techniques.":[32],"Although":[33],"some":[34,184],"methods":[35,52,177],"conducted":[37],"great":[39],"effort":[40],"exploiting":[42],"MILP-aided":[43,176],"searching":[46,68,151],"for":[47,69,152,213,226,251,314],"differential":[48,70,108,154,209,222,243,256,269,299,328],"(linear)":[49,71,155,270,300,329],"characteristics,":[50],"traditional":[51],"still":[53],"suffer":[54],"from":[55,245],"primitives":[56,75,197,216],"with":[57,157,272,302],"strong":[58],"diffusion":[59],"layers":[60],"large":[62],"sizes,":[63],"such":[64,74,113],"as":[65,331],"NOEKEON.":[66,229],"Typically,":[67],"characteristics":[72,156,225,244,330],"is":[76,120,148,265],"difficult,":[77],"corresponding":[80],"MILP":[81,102],"models":[82],"too":[84],"heavy":[85],"to":[86,100,103,121,126,150,178,186,194,247,288],"be":[87],"solved":[88],"efficiently.":[89],"To":[90],"this":[91],"end,":[92],"we":[93,168,202,232,294,312],"propose":[94],"simple":[96],"yet":[97],"efficient":[98],"approach":[99,119],"employ":[101],"evaluate":[104],"against":[107,208],"The":[115],"core":[116],"our":[118,191,260],"reduce":[122],"complex":[124,139],"problem":[125,140],"set":[128],"simpler":[130],"subproblems":[131,181],"obtain":[133,203],"optimal":[135],"solution":[136],"by":[141],"combining":[142],"all":[143,153,214],"subproblems.":[145],"A":[146],"subproblem":[147],"equivalent":[149],"fixed":[159],"number":[160],"active":[162],"S-boxes":[163],"each":[165],"round.":[166],"Furthermore,":[167],"design":[169],"an":[170,296,318],"elaborate":[171],"algorithm":[172,193],"consisting":[173],"three":[175,195,215],"solve":[179],"various":[180],"adopt":[183],"techniques":[185],"improve":[187,233],"efficiency":[188],"further.":[189],"Applying":[190],"new":[192],"SPN":[196],"Serpent,":[198,231],"NOEKEON":[199],"ASCON,":[201],"tightest":[205],"bounds":[207],"so":[217],"far":[218],"find":[220,250,295],"improved":[221],"Serpent":[227],"For":[230,258,309],"upper":[235,319],"bound":[236,320],"maximum":[239,323],"probability":[240,274,304,324],"7-round":[242,255],"$2^{-71}$":[246],"$2^{-76}$":[248],"first":[253,316],"time":[254,317],"characteristics.":[257],"NOEKEON,":[259],"results":[261],"show":[262],"that":[263],"there":[264],"no":[266],"9-round":[267],"(10-round)":[268],"characteristic":[271,301],"(correlation)":[275,305,325],"higher":[276],"than":[277],"$2^{-128}$":[278],"($2^{-64}$),":[279],"whereas":[280],"it":[281],"needs":[282],"10":[283],"rounds":[284],"(11":[285],"rounds)":[286],"according":[287],"previous":[290],"results.":[291],"addition,":[293],"8-round":[297],"(9-round)":[298],"$2^{-127}$":[307],"($2^{-60}$).":[308],"ASCON":[310],"permutation,":[311],"provide":[313],"5-round":[327],"$2^{-70}$":[332],"($2^{-33}$).":[333]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":1}],"updated_date":"2026-07-22T07:51:19.307946","created_date":"2025-10-10T00:00:00"}