{"id":"https://openalex.org/W2573641754","doi":"https://doi.org/10.13154/tosc.v2016.i2.261-287","title":"Significantly Improved Multi-bit Differentials for Reduced Round Salsa and ChaCha","display_name":"Significantly Improved Multi-bit Differentials for Reduced Round Salsa and ChaCha","publication_year":2017,"publication_date":"2017-02-01","ids":{"openalex":"https://openalex.org/W2573641754","doi":"https://doi.org/10.13154/tosc.v2016.i2.261-287","mag":"2573641754"},"language":"en","primary_location":{"id":"pmh:oai:doaj.org/article:c4b331c727244da9b38a7b49e3b21e36","is_oa":false,"landing_page_url":"https://doaj.org/article/c4b331c727244da9b38a7b49e3b21e36","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IACR Transactions on Symmetric Cryptology, Pp 261-287 (2017)","raw_type":"article"},"type":"article","indexed_in":["datacite","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.13154/tosc.v2016.i2.261-287","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5079980064","display_name":"Arka Rai Choudhuri","orcid":"https://orcid.org/0000-0003-0452-3426"},"institutions":[{"id":"https://openalex.org/I145311948","display_name":"Johns Hopkins University","ror":"https://ror.org/00za53h95","country_code":"US","type":"education","lineage":["https://openalex.org/I145311948"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Choudhuri, Arka Rai","raw_affiliation_strings":["Department of Computer Science, Johns Hopkins University, 3400 N. Charles St. Baltimore, MD 21218"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, Johns Hopkins University, 3400 N. Charles St. Baltimore, MD 21218","institution_ids":["https://openalex.org/I145311948"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5083439545","display_name":"Subhamoy Maitra","orcid":"https://orcid.org/0000-0002-8348-7971"},"institutions":[{"id":"https://openalex.org/I6498739","display_name":"Indian Statistical Institute","ror":"https://ror.org/00q2w1j53","country_code":"IN","type":"education","lineage":["https://openalex.org/I6498739"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Maitra, Subhamoy","raw_affiliation_strings":["Applied Statistics Unit, Indian Statistical Institute, 203, B T Road, Kolkata 700 108"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Applied Statistics Unit, Indian Statistical Institute, 203, B T Road, Kolkata 700 108","institution_ids":["https://openalex.org/I6498739"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":5.0026,"has_fulltext":false,"cited_by_count":43,"citation_normalized_percentile":{"value":0.95811532,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":99},"biblio":{"volume":"2016","issue":"2","first_page":"261","last_page":"287"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.9977999925613403,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9975000023841858,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/salsa","display_name":"SALSA","score":0.8430405259132385},{"id":"https://openalex.org/keywords/linear-cryptanalysis","display_name":"Linear cryptanalysis","score":0.7867932319641113},{"id":"https://openalex.org/keywords/block-cipher","display_name":"Block cipher","score":0.703543484210968},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6820587515830994},{"id":"https://openalex.org/keywords/cryptanalysis","display_name":"Cryptanalysis","score":0.6161178350448608},{"id":"https://openalex.org/keywords/differential-cryptanalysis","display_name":"Differential cryptanalysis","score":0.49703291058540344},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.49243077635765076},{"id":"https://openalex.org/keywords/stream-cipher","display_name":"Stream cipher","score":0.4884392321109772},{"id":"https://openalex.org/keywords/bit","display_name":"Bit (key)","score":0.48338428139686584},{"id":"https://openalex.org/keywords/arithmetic","display_name":"Arithmetic","score":0.46966588497161865},{"id":"https://openalex.org/keywords/extension","display_name":"Extension (predicate logic)","score":0.4383472502231598},{"id":"https://openalex.org/keywords/time-complexity","display_name":"Time complexity","score":0.43640998005867004},{"id":"https://openalex.org/keywords/boomerang-attack","display_name":"Boomerang attack","score":0.4255366921424866},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.3844769299030304},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.3483218848705292},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.281663715839386},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.09345847368240356}],"concepts":[{"id":"https://openalex.org/C2776317494","wikidata":"https://www.wikidata.org/wiki/Q217927","display_name":"SALSA","level":3,"score":0.8430405259132385},{"id":"https://openalex.org/C82424418","wikidata":"https://www.wikidata.org/wiki/Q1826463","display_name":"Linear cryptanalysis","level":4,"score":0.7867932319641113},{"id":"https://openalex.org/C106544461","wikidata":"https://www.wikidata.org/wiki/Q543151","display_name":"Block cipher","level":3,"score":0.703543484210968},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6820587515830994},{"id":"https://openalex.org/C181149355","wikidata":"https://www.wikidata.org/wiki/Q897511","display_name":"Cryptanalysis","level":3,"score":0.6161178350448608},{"id":"https://openalex.org/C36123800","wikidata":"https://www.wikidata.org/wiki/Q1224471","display_name":"Differential cryptanalysis","level":4,"score":0.49703291058540344},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.49243077635765076},{"id":"https://openalex.org/C92950451","wikidata":"https://www.wikidata.org/wiki/Q864718","display_name":"Stream cipher","level":3,"score":0.4884392321109772},{"id":"https://openalex.org/C117011727","wikidata":"https://www.wikidata.org/wiki/Q1278488","display_name":"Bit (key)","level":2,"score":0.48338428139686584},{"id":"https://openalex.org/C94375191","wikidata":"https://www.wikidata.org/wiki/Q11205","display_name":"Arithmetic","level":1,"score":0.46966588497161865},{"id":"https://openalex.org/C2778029271","wikidata":"https://www.wikidata.org/wiki/Q5421931","display_name":"Extension (predicate logic)","level":2,"score":0.4383472502231598},{"id":"https://openalex.org/C311688","wikidata":"https://www.wikidata.org/wiki/Q2393193","display_name":"Time complexity","level":2,"score":0.43640998005867004},{"id":"https://openalex.org/C147552392","wikidata":"https://www.wikidata.org/wiki/Q2869899","display_name":"Boomerang attack","level":5,"score":0.4255366921424866},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.3844769299030304},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.3483218848705292},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.281663715839386},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.09345847368240356},{"id":"https://openalex.org/C52119013","wikidata":"https://www.wikidata.org/wiki/Q50637","display_name":"Art history","level":1,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C142362112","wikidata":"https://www.wikidata.org/wiki/Q735","display_name":"Art","level":0,"score":0.0},{"id":"https://openalex.org/C554144382","wikidata":"https://www.wikidata.org/wiki/Q213156","display_name":"Performance art","level":2,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"pmh:oai:doaj.org/article:c4b331c727244da9b38a7b49e3b21e36","is_oa":false,"landing_page_url":"https://doaj.org/article/c4b331c727244da9b38a7b49e3b21e36","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IACR Transactions on Symmetric Cryptology, Pp 261-287 (2017)","raw_type":"article"},{"id":"doi:10.13154/tosc.v2016.i2.261-287","is_oa":true,"landing_page_url":"https://doi.org/10.13154/tosc.v2016.i2.261-287","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"article-journal"},{"id":"mag:2573641754","is_oa":false,"landing_page_url":"https://eprint.iacr.org/2016/1034.pdf","pdf_url":null,"source":{"id":"https://openalex.org/S2764847869","display_name":"IACR Cryptology ePrint Archive","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":["https://openalex.org/P4322614454"],"host_organization_lineage_names":["Cryptology ePrint Archive"],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":"IACR Cryptology ePrint Archive","raw_type":null}],"best_oa_location":{"id":"doi:10.13154/tosc.v2016.i2.261-287","is_oa":true,"landing_page_url":"https://doi.org/10.13154/tosc.v2016.i2.261-287","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article-journal"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":30,"referenced_works":["https://openalex.org/W147018390","https://openalex.org/W603393728","https://openalex.org/W1517403092","https://openalex.org/W1605172130","https://openalex.org/W1606443045","https://openalex.org/W1881820159","https://openalex.org/W1968465951","https://openalex.org/W1998241453","https://openalex.org/W2000171858","https://openalex.org/W2012327282","https://openalex.org/W2025905409","https://openalex.org/W2044389004","https://openalex.org/W2075095478","https://openalex.org/W2080284304","https://openalex.org/W2095526927","https://openalex.org/W2115255494","https://openalex.org/W2116374153","https://openalex.org/W2127596159","https://openalex.org/W2134047447","https://openalex.org/W2135386651","https://openalex.org/W2137072047","https://openalex.org/W2151759197","https://openalex.org/W2152605584","https://openalex.org/W2153885989","https://openalex.org/W2156309524","https://openalex.org/W2161426357","https://openalex.org/W2175377689","https://openalex.org/W2564566221","https://openalex.org/W2570008916","https://openalex.org/W3102114848"],"related_works":["https://openalex.org/W1577801461","https://openalex.org/W2336016133","https://openalex.org/W5758508","https://openalex.org/W2949818540","https://openalex.org/W2615105912","https://openalex.org/W2400196265","https://openalex.org/W2519255459","https://openalex.org/W2400479413","https://openalex.org/W3179206707","https://openalex.org/W1574565813","https://openalex.org/W3176986410","https://openalex.org/W2575578850","https://openalex.org/W1518716055","https://openalex.org/W3158077840","https://openalex.org/W1607876066","https://openalex.org/W2949900000","https://openalex.org/W2039762626","https://openalex.org/W2909396136","https://openalex.org/W2892391102","https://openalex.org/W2950709632"],"abstract_inverted_index":{"ChaCha":[0,164,198,220],"and":[1,134,162,197,218],"Salsa":[2,133,158,196,217],"are":[3,169],"two":[4,171],"software":[5],"oriented":[6],"stream":[7],"ciphers":[8,30,178],"that":[9,199],"have":[10,60],"attracted":[11],"serious":[12],"attention":[13],"in":[14,37,76,157,163,221],"academic":[15],"as":[16,18,106],"well":[17],"commercial":[19],"domain.":[20],"The":[21,96],"most":[22],"important":[23],"cryptanalysis":[24],"of":[25,28,42,64,87,108,125,155,173],"reduced":[26,194],"versions":[27],"these":[29,184],"was":[31,45],"presented":[32],"by":[33],"Aumasson":[34],"et":[35],"al.":[36],"FSE":[38],"2008.":[39],"One":[40],"part":[41],"their":[43],"attack":[44],"to":[46,50,68,82,91,101,214],"apply":[47],"input":[48],"difference(s)":[49],"investigate":[51],"biases":[52,151,185],"after":[53,159,165],"a":[54,118],"few":[55],"rounds.":[56,167],"So":[57],"far":[58],"there":[59],"been":[61],"certain":[62],"kind":[63],"limited":[65],"exhaustive":[66,138],"searches":[67],"obtain":[69,92,148,187],"such":[70],"biases.":[71,95],"For":[72],"the":[73,85,88,103,177,180],"first":[74],"time,":[75],"this":[77,145],"paper,":[78],"we":[79,122,147,186],"show":[80],"how":[81],"theoretically":[83],"choose":[84],"combinations":[86,124,154],"output":[89,127],"bits":[90,128,156],"significantly":[93,189],"improved":[94,190],"main":[97],"idea":[98],"here":[99],"is":[100,116,140,211],"consider":[102,123],"multi-bit":[104],"differentials":[105,111],"extension":[107],"suitable":[109],"single-bit":[110],"with":[112,207],"linear":[113,153],"approximations,":[114],"which":[115],"essentially":[117],"differential-linear":[119],"attack.":[120],"As":[121],"many":[126],"(for":[129],"example":[130],"19":[131],"for":[132,136,152,175,193],"21":[135],"ChaCha),":[137],"search":[139],"not":[141,201],"possible":[142,213],"here.":[143],"By":[144],"method":[146],"very":[149],"high":[150],"6":[160],"rounds":[161,172],"5":[166],"These":[168],"clearly":[170],"improvement":[174],"both":[176],"over":[179],"existing":[181],"works.":[182],"Using":[183],"several":[188],"cryptanalytic":[191],"results":[192,209],"round":[195],"could":[200],"b":[202],"obtained":[203],"earlier.":[204],"In":[205],"fact,":[206],"our":[208],"it":[210],"now":[212],"cryptanalyse":[215],"6-round":[216],"5-round":[219],"practical":[222],"time.":[223]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":6},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":7},{"year":2020,"cited_by_count":6},{"year":2019,"cited_by_count":5},{"year":2018,"cited_by_count":6},{"year":2017,"cited_by_count":5},{"year":2016,"cited_by_count":1}],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2025-10-10T00:00:00"}