{"id":"https://openalex.org/W7162434634","doi":"https://doi.org/10.1109/access.2026.3696987","title":"A Combinatorial Framework for Optimizing Differential Fault Analysis on Lightweight Cryptographic Primitives: Applications to Ascon and Aradi","display_name":"A Combinatorial Framework for Optimizing Differential Fault Analysis on Lightweight Cryptographic Primitives: Applications to Ascon and Aradi","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W7162434634","doi":"https://doi.org/10.1109/access.2026.3696987"},"language":null,"primary_location":{"id":"doi:10.1109/access.2026.3696987","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2026.3696987","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1109/access.2026.3696987","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5137040205","display_name":"Niloy Das","orcid":null},"institutions":[{"id":"https://openalex.org/I157674215","display_name":"Presidency University","ror":"https://ror.org/04xgbph11","country_code":"IN","type":"education","lineage":["https://openalex.org/I157674215"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Niloy Das","raw_affiliation_strings":["Department of Mathematics, Presidency University, Kolkata, India"],"raw_orcid":"https://orcid.org/0009-0008-9719-9883","affiliations":[{"raw_affiliation_string":"Department of Mathematics, Presidency University, Kolkata, India","institution_ids":["https://openalex.org/I157674215"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5081683665","display_name":"Suchandan Ghosh","orcid":null},"institutions":[{"id":"https://openalex.org/I157674215","display_name":"Presidency University","ror":"https://ror.org/04xgbph11","country_code":"IN","type":"education","lineage":["https://openalex.org/I157674215"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Suchandan Ghosh","raw_affiliation_strings":["Department of Mathematics, Presidency University, Kolkata, India"],"raw_orcid":"https://orcid.org/0009-0008-8113-9034","affiliations":[{"raw_affiliation_string":"Department of Mathematics, Presidency University, Kolkata, India","institution_ids":["https://openalex.org/I157674215"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5078425184","display_name":"Sandip Kumar Mondal","orcid":"https://orcid.org/0000-0001-6738-4166"},"institutions":[{"id":"https://openalex.org/I4210100463","display_name":"SRM University, Andhra Pradesh","ror":"https://ror.org/013vs5h31","country_code":"IN","type":"education","lineage":["https://openalex.org/I4210100463"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Sandip Kumar Mondal","raw_affiliation_strings":["Department of Computer Science and Engineering, SRM University AP, Guntur, Andhra Pradesh, India"],"raw_orcid":"https://orcid.org/0000-0001-6738-4166","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, SRM University AP, Guntur, Andhra Pradesh, India","institution_ids":["https://openalex.org/I4210100463"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5078567466","display_name":"Himadry Sekhar Roy","orcid":"https://orcid.org/0000-0002-1910-8105"},"institutions":[{"id":"https://openalex.org/I157674215","display_name":"Presidency University","ror":"https://ror.org/04xgbph11","country_code":"IN","type":"education","lineage":["https://openalex.org/I157674215"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Himadry Sekhar Roy","raw_affiliation_strings":["Department of Mathematics, Presidency University, Kolkata, India"],"raw_orcid":"https://orcid.org/0000-0002-1910-8105","affiliations":[{"raw_affiliation_string":"Department of Mathematics, Presidency University, Kolkata, India","institution_ids":["https://openalex.org/I157674215"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5088817236","display_name":"Raghvendra Rohit","orcid":"https://orcid.org/0000-0002-5272-1016"},"institutions":[{"id":"https://openalex.org/I154851008","display_name":"Indian Institute of Technology Roorkee","ror":"https://ror.org/00582g326","country_code":"IN","type":"education","lineage":["https://openalex.org/I154851008"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Raghvendra Singh Rohit","raw_affiliation_strings":["Department of Computer Science and Engineering, IIT Roorkee, Roorkee, India"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, IIT Roorkee, Roorkee, India","institution_ids":["https://openalex.org/I154851008"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137005662","display_name":"Santanu Sarkar","orcid":"https://orcid.org/0000-0001-6821-920X"},"institutions":[{"id":"https://openalex.org/I24676775","display_name":"Indian Institute of Technology Madras","ror":"https://ror.org/03v0r5n49","country_code":"IN","type":"education","lineage":["https://openalex.org/I24676775"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Santanu Sarkar","raw_affiliation_strings":["Department of Mathematics, IIT Madras, Chennai, India"],"raw_orcid":"https://orcid.org/0000-0001-6821-920X","affiliations":[{"raw_affiliation_string":"Department of Mathematics, IIT Madras, Chennai, India","institution_ids":["https://openalex.org/I24676775"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5049764999","display_name":"Avishek Adhikari","orcid":"https://orcid.org/0000-0002-7768-4629"},"institutions":[{"id":"https://openalex.org/I157674215","display_name":"Presidency University","ror":"https://ror.org/04xgbph11","country_code":"IN","type":"education","lineage":["https://openalex.org/I157674215"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Avishek Adhikari","raw_affiliation_strings":["Department of Mathematics, Presidency University, Kolkata, India"],"raw_orcid":"https://orcid.org/0000-0002-7768-4629","affiliations":[{"raw_affiliation_string":"Department of Mathematics, Presidency University, Kolkata, India","institution_ids":["https://openalex.org/I157674215"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":7,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.84471717,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"14","issue":null,"first_page":"80853","last_page":"80875"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.5236999988555908,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.5236999988555908,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11130","display_name":"Coding theory and cryptography","score":0.33500000834465027,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11693","display_name":"Cryptography and Residue Arithmetic","score":0.02969999983906746,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.5946999788284302},{"id":"https://openalex.org/keywords/differential","display_name":"Differential (mechanical device)","score":0.43720000982284546},{"id":"https://openalex.org/keywords/fault","display_name":"Fault (geology)","score":0.3953000009059906},{"id":"https://openalex.org/keywords/fault-injection","display_name":"Fault injection","score":0.3447999954223633},{"id":"https://openalex.org/keywords/algorithm-design","display_name":"Algorithm design","score":0.33550000190734863},{"id":"https://openalex.org/keywords/cryptographic-primitive","display_name":"Cryptographic primitive","score":0.33090001344680786}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7944999933242798},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.5946999788284302},{"id":"https://openalex.org/C93226319","wikidata":"https://www.wikidata.org/wiki/Q193137","display_name":"Differential (mechanical device)","level":2,"score":0.43720000982284546},{"id":"https://openalex.org/C175551986","wikidata":"https://www.wikidata.org/wiki/Q47089","display_name":"Fault (geology)","level":2,"score":0.3953000009059906},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.35899999737739563},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.3479999899864197},{"id":"https://openalex.org/C2775928411","wikidata":"https://www.wikidata.org/wiki/Q2041312","display_name":"Fault injection","level":3,"score":0.3447999954223633},{"id":"https://openalex.org/C106516650","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm design","level":2,"score":0.33550000190734863},{"id":"https://openalex.org/C15927051","wikidata":"https://www.wikidata.org/wiki/Q246593","display_name":"Cryptographic primitive","level":4,"score":0.33090001344680786},{"id":"https://openalex.org/C152745839","wikidata":"https://www.wikidata.org/wiki/Q5438153","display_name":"Fault detection and isolation","level":3,"score":0.3224000036716461},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.30140000581741333},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.28790000081062317},{"id":"https://openalex.org/C106544461","wikidata":"https://www.wikidata.org/wiki/Q543151","display_name":"Block cipher","level":3,"score":0.2734000086784363},{"id":"https://openalex.org/C187455244","wikidata":"https://www.wikidata.org/wiki/Q942353","display_name":"Boolean function","level":2,"score":0.272599995136261},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.26030001044273376}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/access.2026.3696987","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2026.3696987","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1109/access.2026.3696987","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2026.3696987","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/13","display_name":"Climate action","score":0.6383935213088989}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"This":[0,152],"paper":[1],"develops":[2],"a":[3,54,83,99,232,251],"mathematically":[4],"grounded":[5],"framework":[6,203],"for":[7,71,194,222],"Differential":[8],"Fault":[9],"Analysis":[10],"(DFA)":[11],"on":[12,17],"lightweight":[13,27,264],"symmetric":[14],"primitives,":[15],"focusing":[16],"the":[18,25,36,44,58,76,88,107,156,164,168,172,176,201,216,223,226,260],"NIST-standardized":[19],"authenticated":[20],"encryption":[21,135],"scheme":[22],"Ascon":[23],"and":[24,68,147,258],"NSA\u2019s":[26],"block":[28],"cipher":[29],"Aradi.":[30],"We":[31],"characterize":[32],"fault":[33,67,80,122,217,235,256,261],"propagation":[34],"in":[35,48,163],"underlying":[37],"substitution":[38,46],"permutation":[39],"network":[40],"(SPN)":[41],"by":[42,62,93,181],"modeling":[43],"nonlinear":[45],"layer":[47],"Algebraic":[49],"Normal":[50],"Form":[51],"(ANF),":[52],"enabling":[53],"precise":[55],"description":[56],"of":[57,78,90,159,178,198,237,263],"differential":[59],"relations":[60],"induced":[61],"injected":[63],"faults.":[64],"To":[65],"minimize":[66,255],"query":[69],"complexity":[70,236,257],"key":[72,131,208],"recovery,":[73],"we":[74,127],"formulate":[75],"selection":[77],"effective":[79,230],"patterns":[81],"as":[82,98],"combinatorial":[84,248],"optimization":[85,174,249],"problem,":[86],"where":[87],"coverage":[89],"key-dependent":[91],"variables":[92],"observable":[94],"differentials":[95],"is":[96,153,219],"expressed":[97],"<italic":[100,112],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[101,113],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">Set":[102],"Covering":[103],"Problem</i>":[104],"(SCP).":[105],"Solving":[106],"resulting":[108],"SCP":[109],"via":[110],"an":[111,120,134],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">Integer":[114],"Linear":[115],"Programming</i>":[116],"(ILP)":[117],"model":[118,228],"yields":[119],"optimized":[121],"injection":[123],"strategy.":[124],"For":[125],"Ascon,":[126],"show":[128,242],"that":[129,243],"full":[130,207],"recovery":[132,196,209],"under":[133],"oracle":[136,170],"requires":[137],"only":[138],"72":[139],"faulty":[140,179,212],"queries":[141,161,193,214],"specifically,":[142],"71":[143],"single":[144],"bit-flip":[145],"faults":[146],"one":[148],"multi-bit":[149],"bit-reset":[150],"fault.":[151],"well":[154],"below":[155],"nonce-misuse":[157],"bound":[158],"256":[160],"specified":[162],"NIST":[165],"standard.":[166],"In":[167],"decryption":[169,213],"setting,":[171],"proposed":[173],"reduces":[175],"number":[177],"decryptions":[180],"54.5%":[182],"compared":[183],"with":[184,210,231,247],"previous":[185],"analyses,":[186],"requiring":[187],"at":[188],"most":[189],"320":[190],"(expected":[191],"272)":[192],"half-key":[195],"instead":[197],"704.":[199],"Applying":[200],"same":[202],"to":[204,254],"Aradi":[205],"enables":[206],"64":[211],"when":[215],"location":[218],"known,":[220],"while":[221],"unknown-location":[224],"setting":[225],"ILP-based":[227],"remains":[229],"simulation":[233],"based":[234],"168.":[238],"Overall,":[239],"these":[240],"results":[241],"combining":[244],"algebraic":[245],"cryptanalysis":[246],"provides":[250],"systematic":[252],"method":[253],"assess":[259],"resilience":[262],"cryptographic":[265],"primitives.":[266]},"counts_by_year":[],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2026-05-27T00:00:00"}
