{"id":"https://openalex.org/W3132724916","doi":"https://doi.org/10.1109/tit.2021.3058377","title":"Provable Security Evaluation of Block Ciphers Against Demirci-Sel\u00e7uk\u2019s Meet-in-the-Middle Attack","display_name":"Provable Security Evaluation of Block Ciphers Against Demirci-Sel\u00e7uk\u2019s Meet-in-the-Middle Attack","publication_year":2021,"publication_date":"2021-02-13","ids":{"openalex":"https://openalex.org/W3132724916","doi":"https://doi.org/10.1109/tit.2021.3058377","mag":"3132724916"},"language":"en","primary_location":{"id":"doi:10.1109/tit.2021.3058377","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tit.2021.3058377","pdf_url":null,"source":{"id":"https://openalex.org/S4502562","display_name":"IEEE Transactions on Information Theory","issn_l":"0018-9448","issn":["0018-9448","1557-9654"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Theory","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5003247518","display_name":"Bing Sun","orcid":"https://orcid.org/0000-0002-7403-8795"},"institutions":[{"id":"https://openalex.org/I170215575","display_name":"National University of Defense Technology","ror":"https://ror.org/05d2yfz11","country_code":"CN","type":"education","lineage":["https://openalex.org/I170215575"]},{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]},{"id":"https://openalex.org/I4210132990","display_name":"State Key Laboratory of Cryptology","ror":"https://ror.org/02pn5rj08","country_code":"CN","type":"government","lineage":["https://openalex.org/I4210132990"]}],"countries":["CN","SG"],"is_corresponding":true,"raw_author_name":"Bing Sun","raw_affiliation_strings":["College of Liberal Arts and Sciences, National University of Defense Technology, Changsha, China","Nanyang Technological University, Singapore","State Key Laboratory of Cryptology, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-7403-8795","affiliations":[{"raw_affiliation_string":"College of Liberal Arts and Sciences, National University of Defense Technology, Changsha, China","institution_ids":["https://openalex.org/I170215575"]},{"raw_affiliation_string":"Nanyang Technological University, Singapore","institution_ids":["https://openalex.org/I172675005"]},{"raw_affiliation_string":"State Key Laboratory of Cryptology, Beijing, China","institution_ids":["https://openalex.org/I4210132990"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5003247518"],"corresponding_institution_ids":["https://openalex.org/I170215575","https://openalex.org/I172675005","https://openalex.org/I4210132990"],"apc_list":null,"apc_paid":null,"fwci":0.5459,"has_fulltext":false,"cited_by_count":7,"citation_normalized_percentile":{"value":0.70851186,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":"67","issue":"7","first_page":"4838","last_page":"4844"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11017","display_name":"Chaos-based Image/Signal Encryption","score":0.996999979019165,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11130","display_name":"Coding theory and cryptography","score":0.9957000017166138,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/linear-cryptanalysis","display_name":"Linear cryptanalysis","score":0.905867338180542},{"id":"https://openalex.org/keywords/block-cipher","display_name":"Block cipher","score":0.8796982765197754},{"id":"https://openalex.org/keywords/differential-cryptanalysis","display_name":"Differential cryptanalysis","score":0.7792435884475708},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6142852902412415},{"id":"https://openalex.org/keywords/higher-order-differential-cryptanalysis","display_name":"Higher-order differential cryptanalysis","score":0.6131654977798462},{"id":"https://openalex.org/keywords/cryptanalysis","display_name":"Cryptanalysis","score":0.6022036671638489},{"id":"https://openalex.org/keywords/provable-security","display_name":"Provable security","score":0.5991239547729492},{"id":"https://openalex.org/keywords/impossible-differential-cryptanalysis","display_name":"Impossible differential cryptanalysis","score":0.5249007940292358},{"id":"https://openalex.org/keywords/key-size","display_name":"Key size","score":0.518721878528595},{"id":"https://openalex.org/keywords/boomerang-attack","display_name":"Boomerang attack","score":0.5158928632736206},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.4918959140777588},{"id":"https://openalex.org/keywords/block-size","display_name":"Block size","score":0.4918479919433594},{"id":"https://openalex.org/keywords/concrete-security","display_name":"Concrete security","score":0.45996955037117004},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.4228423237800598},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.37257498502731323},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.3508995473384857},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.3020576536655426},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.15570029616355896},{"id":"https://openalex.org/keywords/public-key-cryptography","display_name":"Public-key cryptography","score":0.15553683042526245},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.1426074504852295}],"concepts":[{"id":"https://openalex.org/C82424418","wikidata":"https://www.wikidata.org/wiki/Q1826463","display_name":"Linear cryptanalysis","level":4,"score":0.905867338180542},{"id":"https://openalex.org/C106544461","wikidata":"https://www.wikidata.org/wiki/Q543151","display_name":"Block cipher","level":3,"score":0.8796982765197754},{"id":"https://openalex.org/C36123800","wikidata":"https://www.wikidata.org/wiki/Q1224471","display_name":"Differential cryptanalysis","level":4,"score":0.7792435884475708},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6142852902412415},{"id":"https://openalex.org/C151607707","wikidata":"https://www.wikidata.org/wiki/Q11673206","display_name":"Higher-order differential cryptanalysis","level":5,"score":0.6131654977798462},{"id":"https://openalex.org/C181149355","wikidata":"https://www.wikidata.org/wiki/Q897511","display_name":"Cryptanalysis","level":3,"score":0.6022036671638489},{"id":"https://openalex.org/C131672422","wikidata":"https://www.wikidata.org/wiki/Q852594","display_name":"Provable security","level":3,"score":0.5991239547729492},{"id":"https://openalex.org/C120488936","wikidata":"https://www.wikidata.org/wiki/Q3005748","display_name":"Impossible differential cryptanalysis","level":5,"score":0.5249007940292358},{"id":"https://openalex.org/C47750902","wikidata":"https://www.wikidata.org/wiki/Q1557574","display_name":"Key size","level":4,"score":0.518721878528595},{"id":"https://openalex.org/C147552392","wikidata":"https://www.wikidata.org/wiki/Q2869899","display_name":"Boomerang attack","level":5,"score":0.5158928632736206},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.4918959140777588},{"id":"https://openalex.org/C41431624","wikidata":"https://www.wikidata.org/wiki/Q1053357","display_name":"Block size","level":3,"score":0.4918479919433594},{"id":"https://openalex.org/C147343967","wikidata":"https://www.wikidata.org/wiki/Q5159078","display_name":"Concrete security","level":3,"score":0.45996955037117004},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.4228423237800598},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.37257498502731323},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.3508995473384857},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.3020576536655426},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.15570029616355896},{"id":"https://openalex.org/C203062551","wikidata":"https://www.wikidata.org/wiki/Q201339","display_name":"Public-key cryptography","level":3,"score":0.15553683042526245},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.1426074504852295}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tit.2021.3058377","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tit.2021.3058377","pdf_url":null,"source":{"id":"https://openalex.org/S4502562","display_name":"IEEE Transactions on Information Theory","issn_l":"0018-9448","issn":["0018-9448","1557-9654"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Theory","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.44999998807907104,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[{"id":"https://openalex.org/G768809861","display_name":null,"funder_award_id":"61772545","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G8170696387","display_name":null,"funder_award_id":"2017YFB0802000","funder_id":"https://openalex.org/F4320335777","funder_display_name":"National Key Research and Development Program of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320335777","display_name":"National Key Research and Development Program of China","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":32,"referenced_works":["https://openalex.org/W85295516","https://openalex.org/W603286849","https://openalex.org/W1409313141","https://openalex.org/W1410816365","https://openalex.org/W1507705751","https://openalex.org/W1541703086","https://openalex.org/W1542500920","https://openalex.org/W1571067952","https://openalex.org/W1583224622","https://openalex.org/W1629301835","https://openalex.org/W1846045953","https://openalex.org/W1883151075","https://openalex.org/W1901931695","https://openalex.org/W1964723977","https://openalex.org/W1978695162","https://openalex.org/W2083383916","https://openalex.org/W2119874003","https://openalex.org/W2164015945","https://openalex.org/W2190250725","https://openalex.org/W2234576048","https://openalex.org/W2423456660","https://openalex.org/W2496427131","https://openalex.org/W2585764074","https://openalex.org/W2585880228","https://openalex.org/W3027260415","https://openalex.org/W4252824418","https://openalex.org/W6603389853","https://openalex.org/W6634536569","https://openalex.org/W6636625848","https://openalex.org/W6639475506","https://openalex.org/W6641304879","https://openalex.org/W6689615373"],"related_works":["https://openalex.org/W2003194200","https://openalex.org/W2507153853","https://openalex.org/W3028658239","https://openalex.org/W4321354008","https://openalex.org/W1499170444","https://openalex.org/W2056493218","https://openalex.org/W1607372077","https://openalex.org/W3142558777","https://openalex.org/W3132724916","https://openalex.org/W1644669832"],"abstract_inverted_index":{"The":[0],"Demirci-Sel\u00e7uk's":[1,94,142,197,224],"meet-in-the-middle":[2,63,167,225],"attack":[3,64],"is":[4,65],"one":[5],"of":[6,75,90,92,140,144,175,179,195,199,208],"the":[7,13,18,22,28,46,58,62,72,87,93,97,112,138,141,161,173,176,180,192,196,200,206,209,216,223],"most":[8,171],"important":[9],"methods":[10],"among":[11],"all":[12],"cryptanalytic":[14],"vectors,":[15],"which":[16,79,213],"gives":[17],"best":[19],"result":[20],"against":[21,45,61,222],"round-reduced":[23],"AES":[24,217],"with":[25],"respect":[26],"to":[27,85],"rounds,":[29],"and":[30,35,54,99,132,183],"tradeoffs":[31],"between":[32],"data,":[33],"time":[34],"memory.":[36],"While":[37],"we":[38,70,80,189],"have":[39],"already":[40],"built":[41],"provable":[42,59,220],"security":[43,60,221],"models":[44],"differential":[47,53],"cryptanalysis,":[48,51,57],"linear":[49,56,181],"cryptanalysis":[50],"impossible":[52],"zero-correlation":[55],"missing.":[66],"In":[67],"this":[68,105,130],"paper,":[69],"propose":[71],"subset":[73],"representation":[74],"function":[76],"based":[77,128],"on":[78,129],"could":[81],"give":[82],"an":[83,134,145,153,164],"algorithm":[84,106,131],"compute":[86],"exact":[88],"number":[89],"parameters":[91],"distinguisher":[95,143,168,198],"given":[96],"input":[98],"output,":[100],"respectively.":[101],"Experiments":[102],"show":[103,133,190],"that":[104,151,191,215],"can":[107],"be":[108,203],"more":[109],"efficient":[110],"than":[111],"automatical":[113],"tool":[114],"presented":[115],"by":[116],"Shi":[117],"et":[118],"al.":[119],"at":[120,170],"Asiacrypt":[121],"2018.":[122],"We":[123,149],"further":[124],"extract":[125],"a":[126,187,219],"formula":[127],"upper":[135],"bound":[136],"for":[137,152],"length":[139,194],"iterative":[146],"SPN":[147,154],"cipher.":[148],"prove":[150],"block":[155,158],"cipher":[156],"whose":[157],"size":[159],"equals":[160],"key":[162],"size,":[163],"effective":[165],"Demirci-Sel\u00e7uk-type":[166],"covers":[169],"twice":[172],"maximum":[174],"primitive":[177],"indexes":[178],"layer":[182],"its":[184],"inverse.":[185],"As":[186],"result,":[188],"known":[193],"AES-128":[201],"cannot":[202],"improved":[204],"unless":[205],"details":[207],"S-boxes":[210],"are":[211],"exploited,":[212],"demonstrates":[214],"has":[218],"attack.":[226]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}