{"id":"https://openalex.org/W2599205485","doi":"https://doi.org/10.13154/tosc.v2017.i1.329-357","title":"New techniques for trail bounds and application to differential trails in Keccak","display_name":"New techniques for trail bounds and application to differential trails in Keccak","publication_year":2017,"publication_date":"2017-03-07","ids":{"openalex":"https://openalex.org/W2599205485","doi":"https://doi.org/10.13154/tosc.v2017.i1.329-357","mag":"2599205485"},"language":"en","primary_location":{"id":"pmh:ru:oai:repository.ubn.ru.nl:2066/173213","is_oa":true,"landing_page_url":"http://hdl.handle.net/2066/173213","pdf_url":"http://hdl.handle.net/2066/173213","source":{"id":"https://openalex.org/S4306401843","display_name":"Data Archiving and Networked Services (DANS)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1322597698","host_organization_name":"Royal Netherlands Academy of Arts and Sciences","host_organization_lineage":["https://openalex.org/I1322597698"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IACR Transactions on Symmetric Cryptology, 2017, 329 - 357","raw_type":"info:eu-repo/semantics/article"},"type":"article","indexed_in":["datacite","doaj"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"http://hdl.handle.net/2066/173213","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5067049629","display_name":"Silvia Mella","orcid":"https://orcid.org/0000-0002-4664-3541"},"institutions":[{"id":"https://openalex.org/I189158943","display_name":"University of Milan","ror":"https://ror.org/00wjc7c48","country_code":"IT","type":"education","lineage":["https://openalex.org/I189158943"]},{"id":"https://openalex.org/I4210154781","display_name":"STMicroelectronics (Italy)","ror":"https://ror.org/053bqv655","country_code":"IT","type":"company","lineage":["https://openalex.org/I131827901","https://openalex.org/I4210154781"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Mella, Silvia","raw_affiliation_strings":["STMicroelectronics; University of Milan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"STMicroelectronics; University of Milan","institution_ids":["https://openalex.org/I189158943","https://openalex.org/I4210154781"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5055847285","display_name":"Joan Daemen","orcid":"https://orcid.org/0000-0002-4102-0775"},"institutions":[{"id":"https://openalex.org/I145872427","display_name":"Radboud University Nijmegen","ror":"https://ror.org/016xsfp80","country_code":"NL","type":"education","lineage":["https://openalex.org/I145872427"]},{"id":"https://openalex.org/I4210106035","display_name":"STMicroelectronics (United States)","ror":"https://ror.org/01f8c3y78","country_code":"US","type":"company","lineage":["https://openalex.org/I131827901","https://openalex.org/I4210106035"]}],"countries":["NL","US"],"is_corresponding":false,"raw_author_name":"Daemen, Joan","raw_affiliation_strings":["STMicroelectronics; Radboud University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"STMicroelectronics; Radboud University","institution_ids":["https://openalex.org/I145872427","https://openalex.org/I4210106035"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5113873259","display_name":"Gilles Van Assche","orcid":"https://orcid.org/0000-0001-5003-8937"},"institutions":[{"id":"https://openalex.org/I4210124177","display_name":"STMicroelectronics (Czechia)","ror":"https://ror.org/03c7ss521","country_code":"CZ","type":"company","lineage":["https://openalex.org/I131827901","https://openalex.org/I4210124177"]}],"countries":["CZ"],"is_corresponding":false,"raw_author_name":"Van Assche, Gilles","raw_affiliation_strings":["STMicroelectronics"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"STMicroelectronics","institution_ids":["https://openalex.org/I4210124177"]}]}],"institutions":[],"countries_distinct_count":4,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.2731,"has_fulltext":true,"cited_by_count":18,"citation_normalized_percentile":{"value":0.90406335,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":97},"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11130","display_name":"Coding theory and cryptography","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11130","display_name":"Coding theory and cryptography","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11693","display_name":"Cryptography and Residue Arithmetic","score":0.9422000050544739,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/tree-traversal","display_name":"Tree traversal","score":0.8573763370513916},{"id":"https://openalex.org/keywords/bounding-overwatch","display_name":"Bounding overwatch","score":0.6897658109664917},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6466301679611206},{"id":"https://openalex.org/keywords/tree","display_name":"Tree (set theory)","score":0.6215247511863708},{"id":"https://openalex.org/keywords/node","display_name":"Node (physics)","score":0.5322180986404419},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.5221869349479675},{"id":"https://openalex.org/keywords/differential","display_name":"Differential (mechanical device)","score":0.5021426677703857},{"id":"https://openalex.org/keywords/differential-cryptanalysis","display_name":"Differential cryptanalysis","score":0.4751943349838257},{"id":"https://openalex.org/keywords/state-space","display_name":"State space","score":0.4680808484554291},{"id":"https://openalex.org/keywords/state","display_name":"State (computer science)","score":0.4439865052700043},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.35664820671081543},{"id":"https://openalex.org/keywords/discrete-mathematics","display_name":"Discrete mathematics","score":0.3455600142478943},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.3402830958366394},{"id":"https://openalex.org/keywords/combinatorics","display_name":"Combinatorics","score":0.3113142251968384},{"id":"https://openalex.org/keywords/cryptanalysis","display_name":"Cryptanalysis","score":0.21764332056045532},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.1515592634677887},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.13840162754058838},{"id":"https://openalex.org/keywords/statistics","display_name":"Statistics","score":0.11304304003715515}],"concepts":[{"id":"https://openalex.org/C140745168","wikidata":"https://www.wikidata.org/wiki/Q1210082","display_name":"Tree traversal","level":2,"score":0.8573763370513916},{"id":"https://openalex.org/C63584917","wikidata":"https://www.wikidata.org/wiki/Q333286","display_name":"Bounding overwatch","level":2,"score":0.6897658109664917},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6466301679611206},{"id":"https://openalex.org/C113174947","wikidata":"https://www.wikidata.org/wiki/Q2859736","display_name":"Tree (set theory)","level":2,"score":0.6215247511863708},{"id":"https://openalex.org/C62611344","wikidata":"https://www.wikidata.org/wiki/Q1062658","display_name":"Node (physics)","level":2,"score":0.5322180986404419},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.5221869349479675},{"id":"https://openalex.org/C93226319","wikidata":"https://www.wikidata.org/wiki/Q193137","display_name":"Differential (mechanical device)","level":2,"score":0.5021426677703857},{"id":"https://openalex.org/C36123800","wikidata":"https://www.wikidata.org/wiki/Q1224471","display_name":"Differential cryptanalysis","level":4,"score":0.4751943349838257},{"id":"https://openalex.org/C72434380","wikidata":"https://www.wikidata.org/wiki/Q230930","display_name":"State space","level":2,"score":0.4680808484554291},{"id":"https://openalex.org/C48103436","wikidata":"https://www.wikidata.org/wiki/Q599031","display_name":"State (computer science)","level":2,"score":0.4439865052700043},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.35664820671081543},{"id":"https://openalex.org/C118615104","wikidata":"https://www.wikidata.org/wiki/Q121416","display_name":"Discrete mathematics","level":1,"score":0.3455600142478943},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.3402830958366394},{"id":"https://openalex.org/C114614502","wikidata":"https://www.wikidata.org/wiki/Q76592","display_name":"Combinatorics","level":1,"score":0.3113142251968384},{"id":"https://openalex.org/C181149355","wikidata":"https://www.wikidata.org/wiki/Q897511","display_name":"Cryptanalysis","level":3,"score":0.21764332056045532},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.1515592634677887},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.13840162754058838},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.11304304003715515},{"id":"https://openalex.org/C66938386","wikidata":"https://www.wikidata.org/wiki/Q633538","display_name":"Structural engineering","level":1,"score":0.0},{"id":"https://openalex.org/C146978453","wikidata":"https://www.wikidata.org/wiki/Q3798668","display_name":"Aerospace engineering","level":1,"score":0.0},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"pmh:ru:oai:repository.ubn.ru.nl:2066/173213","is_oa":true,"landing_page_url":"http://hdl.handle.net/2066/173213","pdf_url":"http://hdl.handle.net/2066/173213","source":{"id":"https://openalex.org/S4306401843","display_name":"Data Archiving and Networked Services (DANS)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1322597698","host_organization_name":"Royal Netherlands Academy of Arts and Sciences","host_organization_lineage":["https://openalex.org/I1322597698"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IACR Transactions on Symmetric Cryptology, 2017, 329 - 357","raw_type":"info:eu-repo/semantics/article"},{"id":"pmh:oai:doaj.org/article:892027e3e3914214a981dd2945b36c2f","is_oa":true,"landing_page_url":"https://doaj.org/article/892027e3e3914214a981dd2945b36c2f","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IACR Transactions on Symmetric Cryptology, Pp 329-357 (2017)","raw_type":"article"},{"id":"doi:10.13154/tosc.v2017.i1.329-357","is_oa":true,"landing_page_url":"https://doi.org/10.13154/tosc.v2017.i1.329-357","pdf_url":null,"source":{"id":"https://openalex.org/S4377196777","display_name":"University Library BOCHUM (Ruhr University Bochum)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I904495901","host_organization_name":"Ruhr University Bochum","host_organization_lineage":["https://openalex.org/I904495901"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"JournalArticle"}],"best_oa_location":{"id":"pmh:ru:oai:repository.ubn.ru.nl:2066/173213","is_oa":true,"landing_page_url":"http://hdl.handle.net/2066/173213","pdf_url":"http://hdl.handle.net/2066/173213","source":{"id":"https://openalex.org/S4306401843","display_name":"Data Archiving and Networked Services (DANS)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1322597698","host_organization_name":"Royal Netherlands Academy of Arts and Sciences","host_organization_lineage":["https://openalex.org/I1322597698"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IACR Transactions on Symmetric Cryptology, 2017, 329 - 357","raw_type":"info:eu-repo/semantics/article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2599205485.pdf","grobid_xml":"https://content.openalex.org/works/W2599205485.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2371447506","https://openalex.org/W2386767533","https://openalex.org/W2057623054","https://openalex.org/W2111213970","https://openalex.org/W2072822029","https://openalex.org/W1565425015","https://openalex.org/W2340621616","https://openalex.org/W2056293263"],"abstract_inverted_index":{"We":[0,105,193],"present":[1],"new":[2,175,197],"techniques":[3,108],"to":[4,35,65,109,120,201],"efficiently":[5,66],"scan":[6,121],"the":[7,53,56,68,72,79,90,95,110,122,180,202,207,210],"space":[8,123,133],"of":[9,21,30,43,55,60,81,124,130,136,154,183,204],"high-probability":[10],"differential":[11,184],"trails":[12,17,45,100,125,185,198],"in":[13,19,33,38,150],"bit-oriented":[14],"ciphers.":[15],"Differential":[16],"consist":[18],"sequences":[20],"state":[22,91],"patterns":[23,92],"that":[24,74,146,165,199],"we":[25,75,88,117,173],"represent":[26],"as":[27],"ordered":[28],"lists":[29],"basic":[31,61],"components":[32,62],"order":[34],"arrange":[36],"them":[37],"a":[39,171],"tree.":[40,57],"The":[41],"task":[42],"generating":[44],"with":[46,52,126,162,209],"probability":[47,80],"above":[48],"some":[49],"threshold":[50],"starts":[51],"traversal":[54,97],"Our":[58],"choice":[59],"allows":[63],"us":[64],"prune":[67],"tree":[69,96],"based":[70],"on":[71,144,186,196],"fact":[73],"can":[76],"tightly":[77],"bound":[78],"all":[82],"descendants":[83],"for":[84,115,179],"any":[85,158],"node.":[86],"Then":[87],"extend":[89],"resulting":[93],"from":[94],"into":[98],"longer":[99],"using":[101],"similar":[102],"bounding":[103],"techniques.":[104],"apply":[106],"these":[107],"4":[111],"largest":[112],"Keccak-f":[113],"permutations,":[114],"which":[116,149],"are":[118],"able":[119],"weight":[127,182],"per":[128],"round":[129],"15.":[131],"This":[132],"is":[134,152],"orders":[135,153],"magnitude":[137,155],"larger":[138,156],"than":[139,157],"previously":[140],"best":[141,203],"result":[142,172],"published":[143,159],"Keccak-f[1600]":[145],"reached":[147,166],"12,":[148],"turn":[151],"results":[160],"achieved":[161],"standard":[163],"tools,":[164],"at":[167],"most":[168],"9.":[169],"As":[170],"provide":[174],"and":[176,190],"improved":[177],"bounds":[178],"minimum":[181],"3,":[187],"4,":[188],"5":[189],"6":[191],"rounds.":[192],"also":[194],"report":[195],"are,":[200],"our":[205],"knowledge,":[206],"ones":[208],"highest":[211],"known":[212],"probability.":[213]},"counts_by_year":[{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":3},{"year":2021,"cited_by_count":2},{"year":2020,"cited_by_count":3},{"year":2019,"cited_by_count":3},{"year":2018,"cited_by_count":3},{"year":2017,"cited_by_count":1}],"updated_date":"2026-08-14T07:06:38.338062","created_date":"2025-10-10T00:00:00"}
