{"id":"https://openalex.org/W2575957737","doi":"https://doi.org/10.13154/tosc.v2016.i2.192-225","title":"Subspace Trail Cryptanalysis and its Applications to AES","display_name":"Subspace Trail Cryptanalysis and its Applications to AES","publication_year":2017,"publication_date":"2017-02-01","ids":{"openalex":"https://openalex.org/W2575957737","doi":"https://doi.org/10.13154/tosc.v2016.i2.192-225","mag":"2575957737"},"language":"en","primary_location":{"id":"pmh:oai:doaj.org/article:1bb869a0e2dd44f593c731ebd3be9400","is_oa":false,"landing_page_url":"https://doaj.org/article/1bb869a0e2dd44f593c731ebd3be9400","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IACR Transactions on Symmetric Cryptology, Pp 192-225 (2017)","raw_type":"article"},"type":"article","indexed_in":["datacite","doaj"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.13154/tosc.v2016.i2.192-225","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5085134047","display_name":"Lorenzo Grassi","orcid":"https://orcid.org/0000-0003-1140-0520"},"institutions":[{"id":"https://openalex.org/I4092182","display_name":"Graz University of Technology","ror":"https://ror.org/00d7xrm67","country_code":"AT","type":"education","lineage":["https://openalex.org/I4092182"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Grassi, Lorenzo","raw_affiliation_strings":["IAIK, Graz University of Technology,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"IAIK, Graz University of Technology,","institution_ids":["https://openalex.org/I4092182"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5068575128","display_name":"Christian Rechberger","orcid":"https://orcid.org/0000-0003-1280-6020"},"institutions":[{"id":"https://openalex.org/I4092182","display_name":"Graz University of Technology","ror":"https://ror.org/00d7xrm67","country_code":"AT","type":"education","lineage":["https://openalex.org/I4092182"]},{"id":"https://openalex.org/I96673099","display_name":"Technical University of Denmark","ror":"https://ror.org/04qtj9h94","country_code":"DK","type":"education","lineage":["https://openalex.org/I96673099"]}],"countries":["AT","DK"],"is_corresponding":false,"raw_author_name":"Rechberger, Christian","raw_affiliation_strings":["DTU Compute, Technical University of Denmark; IAIK, Graz University of Technology"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"DTU Compute, Technical University of Denmark; IAIK, Graz University of Technology","institution_ids":["https://openalex.org/I96673099","https://openalex.org/I4092182"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5078423387","display_name":"Sondre R\u00f8njom","orcid":null},"institutions":[{"id":"https://openalex.org/I4432739","display_name":"University of Bergen","ror":"https://ror.org/03zga2b32","country_code":"NO","type":"education","lineage":["https://openalex.org/I4432739"]}],"countries":["NO"],"is_corresponding":false,"raw_author_name":"R\u00f8njom, Sondre","raw_affiliation_strings":["Nasjonal sikkerhetsmyndighet; Department of Informatics, University of Bergen"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Nasjonal sikkerhetsmyndighet; Department of Informatics, University of Bergen","institution_ids":["https://openalex.org/I4432739"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":7.2808,"has_fulltext":false,"cited_by_count":59,"citation_normalized_percentile":{"value":0.97572558,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":99},"biblio":{"volume":"2016","issue":"2","first_page":"192","last_page":"225"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11130","display_name":"Coding theory and cryptography","score":0.9941999912261963,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11017","display_name":"Chaos-based Image/Signal Encryption","score":0.9894999861717224,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/block-cipher","display_name":"Block cipher","score":0.7883042097091675},{"id":"https://openalex.org/keywords/impossible-differential-cryptanalysis","display_name":"Impossible differential cryptanalysis","score":0.7814290523529053},{"id":"https://openalex.org/keywords/linear-cryptanalysis","display_name":"Linear cryptanalysis","score":0.7383055090904236},{"id":"https://openalex.org/keywords/boomerang-attack","display_name":"Boomerang attack","score":0.6942194700241089},{"id":"https://openalex.org/keywords/higher-order-differential-cryptanalysis","display_name":"Higher-order differential cryptanalysis","score":0.6762946844100952},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5997722148895264},{"id":"https://openalex.org/keywords/differential-cryptanalysis","display_name":"Differential cryptanalysis","score":0.5478867292404175},{"id":"https://openalex.org/keywords/subspace-topology","display_name":"Subspace topology","score":0.48274797201156616},{"id":"https://openalex.org/keywords/linear-subspace","display_name":"Linear subspace","score":0.4786473512649536},{"id":"https://openalex.org/keywords/advanced-encryption-standard","display_name":"Advanced Encryption Standard","score":0.47218647599220276},{"id":"https://openalex.org/keywords/cryptanalysis","display_name":"Cryptanalysis","score":0.46818554401397705},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.41511279344558716},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.40119606256484985},{"id":"https://openalex.org/keywords/arithmetic","display_name":"Arithmetic","score":0.33476316928863525},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.329267680644989},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.3012373447418213},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.08187440037727356},{"id":"https://openalex.org/keywords/pure-mathematics","display_name":"Pure mathematics","score":0.06832358241081238}],"concepts":[{"id":"https://openalex.org/C106544461","wikidata":"https://www.wikidata.org/wiki/Q543151","display_name":"Block cipher","level":3,"score":0.7883042097091675},{"id":"https://openalex.org/C120488936","wikidata":"https://www.wikidata.org/wiki/Q3005748","display_name":"Impossible differential cryptanalysis","level":5,"score":0.7814290523529053},{"id":"https://openalex.org/C82424418","wikidata":"https://www.wikidata.org/wiki/Q1826463","display_name":"Linear cryptanalysis","level":4,"score":0.7383055090904236},{"id":"https://openalex.org/C147552392","wikidata":"https://www.wikidata.org/wiki/Q2869899","display_name":"Boomerang attack","level":5,"score":0.6942194700241089},{"id":"https://openalex.org/C151607707","wikidata":"https://www.wikidata.org/wiki/Q11673206","display_name":"Higher-order differential cryptanalysis","level":5,"score":0.6762946844100952},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5997722148895264},{"id":"https://openalex.org/C36123800","wikidata":"https://www.wikidata.org/wiki/Q1224471","display_name":"Differential cryptanalysis","level":4,"score":0.5478867292404175},{"id":"https://openalex.org/C32834561","wikidata":"https://www.wikidata.org/wiki/Q660730","display_name":"Subspace topology","level":2,"score":0.48274797201156616},{"id":"https://openalex.org/C12362212","wikidata":"https://www.wikidata.org/wiki/Q728435","display_name":"Linear subspace","level":2,"score":0.4786473512649536},{"id":"https://openalex.org/C94520183","wikidata":"https://www.wikidata.org/wiki/Q190746","display_name":"Advanced Encryption Standard","level":3,"score":0.47218647599220276},{"id":"https://openalex.org/C181149355","wikidata":"https://www.wikidata.org/wiki/Q897511","display_name":"Cryptanalysis","level":3,"score":0.46818554401397705},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.41511279344558716},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.40119606256484985},{"id":"https://openalex.org/C94375191","wikidata":"https://www.wikidata.org/wiki/Q11205","display_name":"Arithmetic","level":1,"score":0.33476316928863525},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.329267680644989},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.3012373447418213},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.08187440037727356},{"id":"https://openalex.org/C202444582","wikidata":"https://www.wikidata.org/wiki/Q837863","display_name":"Pure mathematics","level":1,"score":0.06832358241081238}],"mesh":[],"locations_count":3,"locations":[{"id":"pmh:oai:doaj.org/article:1bb869a0e2dd44f593c731ebd3be9400","is_oa":false,"landing_page_url":"https://doaj.org/article/1bb869a0e2dd44f593c731ebd3be9400","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IACR Transactions on Symmetric Cryptology, Pp 192-225 (2017)","raw_type":"article"},{"id":"doi:10.13154/tosc.v2016.i2.192-225","is_oa":true,"landing_page_url":"https://doi.org/10.13154/tosc.v2016.i2.192-225","pdf_url":null,"source":{"id":"https://openalex.org/S7407052971","display_name":"UB Bochum","issn_l":null,"issn":[],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"article-journal"},{"id":"mag:2575957737","is_oa":false,"landing_page_url":"https://eprint.iacr.org/2016/592.pdf","pdf_url":null,"source":{"id":"https://openalex.org/S4306418413","display_name":"Fast Software Encryption","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":"Fast Software Encryption","raw_type":null}],"best_oa_location":{"id":"doi:10.13154/tosc.v2016.i2.192-225","is_oa":true,"landing_page_url":"https://doi.org/10.13154/tosc.v2016.i2.192-225","pdf_url":null,"source":{"id":"https://openalex.org/S7407052971","display_name":"UB Bochum","issn_l":null,"issn":[],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article-journal"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":18,"referenced_works":["https://openalex.org/W74032123","https://openalex.org/W1579173797","https://openalex.org/W1972792640","https://openalex.org/W2024435371","https://openalex.org/W2038272454","https://openalex.org/W2049016755","https://openalex.org/W2061323203","https://openalex.org/W2069191912","https://openalex.org/W2077017336","https://openalex.org/W2119024968","https://openalex.org/W2125636047","https://openalex.org/W2135134090","https://openalex.org/W2144579822","https://openalex.org/W2166473670","https://openalex.org/W2293624083","https://openalex.org/W2570389679","https://openalex.org/W2912250127","https://openalex.org/W2963754417"],"related_works":["https://openalex.org/W1572300106","https://openalex.org/W2591966525","https://openalex.org/W2479257632","https://openalex.org/W2769426629","https://openalex.org/W2109265351","https://openalex.org/W83473285","https://openalex.org/W2794564374","https://openalex.org/W2794069903","https://openalex.org/W2234576048","https://openalex.org/W1587120902","https://openalex.org/W1556212265","https://openalex.org/W1541703086","https://openalex.org/W2883079933","https://openalex.org/W2182100776","https://openalex.org/W1496829145","https://openalex.org/W2954468923","https://openalex.org/W1501856114","https://openalex.org/W2513781444","https://openalex.org/W1629301835","https://openalex.org/W1525447969"],"abstract_inverted_index":{"We":[0,83],"introduce":[1],"subspace":[2,9,45],"trail":[3,46],"cryptanalysis,":[4],"a":[5,38,79,108,114,178,217],"generalization":[6],"of":[7,16,26,101,189,208],"invariant":[8],"cryptanalysis.":[10],"With":[11],"this":[12,152],"more":[13,40],"generic":[14],"treatment":[15],"subspaces":[17],"we":[18,71,104,112,198],"do":[19],"no":[20],"longer":[21],"rely":[22],"on":[23,53,95,165,169,205],"specific":[24],"choices":[25],"round":[27],"constants":[28],"or":[29,55],"subkeys,":[30],"and":[31,58,98,111,143,168,235],"the":[32,66,122,130,148,166,170,186,222,226],"resulting":[33],"method":[34],"is":[35],"as":[36,60,65,225],"such":[37,180],"potentially":[39],"powerful":[41],"attack":[42,204],"vector.":[43],"Interestingly,":[44],"cryptanalysis":[47],"in":[48,221],"fact":[49],"includes":[50],"techniques":[51],"based":[52],"impossible":[54,141,202],"truncated":[56,139],"differentials":[57],"integrals":[59],"special":[61],"cases.":[62],"Choosing":[63],"AES-128":[64],"perhaps":[67],"most":[68],"studied":[69],"cipher,":[70],"describe":[72],"distinguishers":[73],"up":[74],"to":[75,119,136,146,183],"5-round":[76],"AES":[77,106,209,220],"with":[78,91,107,210],"single":[80],"unknown":[81],"key.":[82,150],"report":[84],"(and":[85],"practically":[86],"verify)":[87],"competitive":[88],"key-recovery":[89],"attacks":[90,145,181],"very":[92,162],"low":[93],"data-complexity":[94],"2,":[96],"3":[97],"4":[99],"rounds":[100,207],"AES.":[102],"Additionally,":[103],"consider":[105],"secret":[109,123,131,149,211],"S-Box":[110,167,212],"present":[113],"(generic)":[115],"technique":[116,153],"that":[117,200],"allows":[118,135],"directly":[120],"recover":[121],"key":[124],"without":[125],"finding":[126],"any":[127],"information":[128],"about":[129],"S-Box.":[132],"This":[133],"approach":[134],"use":[137],"e.g.":[138],"differential,":[140],"differential":[142,203],"integral":[144],"find":[147],"Moreover,":[151],"works":[154],"also":[155],"for":[156,219],"other":[157],"AES-like":[158,194],"constructions,":[159],"if":[160],"some":[161],"common":[163],"conditions":[164],"MixColumns":[171],"matrix":[172],"(or":[173],"its":[174],"inverse)":[175],"hold.":[176],"As":[177],"consequence,":[179],"allow":[182],"better":[184],"highlight":[185],"security":[187],"impact":[188],"linear":[190],"mappings":[191],"inside":[192],"an":[193],"block":[195],"cipher.":[196],"Finally,":[197],"show":[199],"our":[201],"5":[206],"can":[213],"be":[214],"turned":[215],"into":[216],"distinguisher":[218],"same":[223],"setting":[224],"one":[227],"recently":[228],"proposed":[229],"by":[230],"Sun,":[231],"Liu,":[232],"Guo,":[233],"Qu":[234],"Rijmen":[236],"at":[237],"CRYPTO":[238],"2016":[239]},"counts_by_year":[{"year":2026,"cited_by_count":4},{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":7},{"year":2022,"cited_by_count":3},{"year":2021,"cited_by_count":5},{"year":2020,"cited_by_count":13},{"year":2019,"cited_by_count":8},{"year":2018,"cited_by_count":7},{"year":2017,"cited_by_count":7},{"year":2016,"cited_by_count":1}],"updated_date":"2026-06-30T13:55:48.251075","created_date":"2025-10-10T00:00:00"}