{"id":"https://openalex.org/W7164317840","doi":"https://doi.org/10.46586/tosc.a0lmpak8nny","title":"Key Recovery Attacks on ZIP Ciphers: Application to ZIP-AES and ZIP-GIFT","display_name":"Key Recovery Attacks on ZIP Ciphers: Application to ZIP-AES and ZIP-GIFT","publication_year":2026,"publication_date":"2026-06-11","ids":{"openalex":"https://openalex.org/W7164317840","doi":"https://doi.org/10.46586/tosc.a0lmpak8nny"},"language":"en","primary_location":{"id":"doi:10.46586/tosc.a0lmpak8nny","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tosc.a0lmpak8nny","pdf_url":"https://tosc.iacr.org/index.php/ToSC/article/download/13008/12586","source":{"id":"https://openalex.org/S4210236173","display_name":"IACR Transactions on Symmetric Cryptology","issn_l":"2519-173X","issn":["2519-173X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Symmetric Cryptology","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://tosc.iacr.org/index.php/ToSC/article/download/13008/12586","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5068885367","display_name":"Marcel Nageler","orcid":"https://orcid.org/0000-0002-2329-7631"},"institutions":[{"id":"https://openalex.org/I4092182","display_name":"Graz University of Technology","ror":"https://ror.org/00d7xrm67","country_code":"AT","type":"education","lineage":["https://openalex.org/I4092182"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Marcel Nageler","raw_affiliation_strings":["Graz University of Technology, Graz, Austria"],"raw_orcid":"https://orcid.org/0000-0002-2329-7631","affiliations":[{"raw_affiliation_string":"Graz University of Technology, Graz, Austria","institution_ids":["https://openalex.org/I4092182"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5046891732","display_name":"D. Chakraborty","orcid":"https://orcid.org/0000-0001-7240-5304"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Debasmita Chakraborty","raw_affiliation_strings":["NTT Social Informatics Laboratories, Tokyo, Japan"],"raw_orcid":"https://orcid.org/0000-0001-7240-5304","affiliations":[{"raw_affiliation_string":"NTT Social Informatics Laboratories, Tokyo, Japan","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138461072","display_name":"Simon Scherer","orcid":"https://orcid.org/0009-0007-4863-8205"},"institutions":[{"id":"https://openalex.org/I4092182","display_name":"Graz University of Technology","ror":"https://ror.org/00d7xrm67","country_code":"AT","type":"education","lineage":["https://openalex.org/I4092182"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Simon Scherer","raw_affiliation_strings":["Graz University of Technology, Graz, Austria"],"raw_orcid":"https://orcid.org/0009-0007-4863-8205","affiliations":[{"raw_affiliation_string":"Graz University of Technology, Graz, Austria","institution_ids":["https://openalex.org/I4092182"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5012269418","display_name":"Maria Eichlseder","orcid":"https://orcid.org/0000-0002-8750-7423"},"institutions":[{"id":"https://openalex.org/I4092182","display_name":"Graz University of Technology","ror":"https://ror.org/00d7xrm67","country_code":"AT","type":"education","lineage":["https://openalex.org/I4092182"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Maria Eichlseder","raw_affiliation_strings":["Graz University of Technology, Graz, Austria"],"raw_orcid":"https://orcid.org/0000-0002-8750-7423","affiliations":[{"raw_affiliation_string":"Graz University of Technology, Graz, Austria","institution_ids":["https://openalex.org/I4092182"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.60176915,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"2026","issue":"2","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9839000105857849,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9839000105857849,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.007600000128149986,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11017","display_name":"Chaos-based Image/Signal Encryption","score":0.0038999998942017555,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/block-cipher","display_name":"Block cipher","score":0.814300000667572},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.6194999814033508},{"id":"https://openalex.org/keywords/differential-cryptanalysis","display_name":"Differential cryptanalysis","score":0.6078000068664551},{"id":"https://openalex.org/keywords/differential","display_name":"Differential (mechanical device)","score":0.5178999900817871},{"id":"https://openalex.org/keywords/pseudorandom-function-family","display_name":"Pseudorandom function family","score":0.4982999861240387},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.47360000014305115},{"id":"https://openalex.org/keywords/cryptanalysis","display_name":"Cryptanalysis","score":0.45410001277923584},{"id":"https://openalex.org/keywords/block","display_name":"Block (permutation group theory)","score":0.4447999894618988},{"id":"https://openalex.org/keywords/pseudorandom-number-generator","display_name":"Pseudorandom number generator","score":0.427700012922287}],"concepts":[{"id":"https://openalex.org/C106544461","wikidata":"https://www.wikidata.org/wiki/Q543151","display_name":"Block cipher","level":3,"score":0.814300000667572},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.6194999814033508},{"id":"https://openalex.org/C36123800","wikidata":"https://www.wikidata.org/wiki/Q1224471","display_name":"Differential cryptanalysis","level":4,"score":0.6078000068664551},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5665000081062317},{"id":"https://openalex.org/C93226319","wikidata":"https://www.wikidata.org/wiki/Q193137","display_name":"Differential (mechanical device)","level":2,"score":0.5178999900817871},{"id":"https://openalex.org/C178774983","wikidata":"https://www.wikidata.org/wiki/Q734896","display_name":"Pseudorandom function family","level":3,"score":0.4982999861240387},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.47360000014305115},{"id":"https://openalex.org/C181149355","wikidata":"https://www.wikidata.org/wiki/Q897511","display_name":"Cryptanalysis","level":3,"score":0.45410001277923584},{"id":"https://openalex.org/C2777210771","wikidata":"https://www.wikidata.org/wiki/Q4927124","display_name":"Block (permutation group theory)","level":2,"score":0.4447999894618988},{"id":"https://openalex.org/C140642157","wikidata":"https://www.wikidata.org/wiki/Q1623338","display_name":"Pseudorandom number generator","level":2,"score":0.427700012922287},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4244000017642975},{"id":"https://openalex.org/C2780801425","wikidata":"https://www.wikidata.org/wiki/Q5164392","display_name":"Construct (python library)","level":2,"score":0.41130000352859497},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.4068000018596649},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.3885999917984009},{"id":"https://openalex.org/C2780221543","wikidata":"https://www.wikidata.org/wiki/Q4681865","display_name":"Cipher","level":3,"score":0.3652999997138977},{"id":"https://openalex.org/C90897222","wikidata":"https://www.wikidata.org/wiki/Q134983","display_name":"Triple DES","level":4,"score":0.3183000087738037},{"id":"https://openalex.org/C151607707","wikidata":"https://www.wikidata.org/wiki/Q11673206","display_name":"Higher-order differential cryptanalysis","level":5,"score":0.3093999922275543},{"id":"https://openalex.org/C92950451","wikidata":"https://www.wikidata.org/wiki/Q864718","display_name":"Stream cipher","level":3,"score":0.29919999837875366},{"id":"https://openalex.org/C131672422","wikidata":"https://www.wikidata.org/wiki/Q852594","display_name":"Provable security","level":3,"score":0.2976999878883362},{"id":"https://openalex.org/C89694405","wikidata":"https://www.wikidata.org/wiki/Q7540343","display_name":"Slide attack","level":5,"score":0.27619999647140503},{"id":"https://openalex.org/C82424418","wikidata":"https://www.wikidata.org/wiki/Q1826463","display_name":"Linear cryptanalysis","level":4,"score":0.2667999863624573},{"id":"https://openalex.org/C38369872","wikidata":"https://www.wikidata.org/wiki/Q7445009","display_name":"Security analysis","level":2,"score":0.26570001244544983},{"id":"https://openalex.org/C41431624","wikidata":"https://www.wikidata.org/wiki/Q1053357","display_name":"Block size","level":3,"score":0.25850000977516174},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.2583000063896179},{"id":"https://openalex.org/C94520183","wikidata":"https://www.wikidata.org/wiki/Q190746","display_name":"Advanced Encryption Standard","level":3,"score":0.2542000114917755}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.46586/tosc.a0lmpak8nny","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tosc.a0lmpak8nny","pdf_url":"https://tosc.iacr.org/index.php/ToSC/article/download/13008/12586","source":{"id":"https://openalex.org/S4210236173","display_name":"IACR Transactions on Symmetric Cryptology","issn_l":"2519-173X","issn":["2519-173X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Symmetric Cryptology","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:3b103c5a0c20488dac0a7e9e0a3955bc","is_oa":true,"landing_page_url":"https://doaj.org/article/3b103c5a0c20488dac0a7e9e0a3955bc","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IACR Transactions on Symmetric Cryptology, Vol 2026, Iss 2 (2026)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.46586/tosc.a0lmpak8nny","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tosc.a0lmpak8nny","pdf_url":"https://tosc.iacr.org/index.php/ToSC/article/download/13008/12586","source":{"id":"https://openalex.org/S4210236173","display_name":"IACR Transactions on Symmetric Cryptology","issn_l":"2519-173X","issn":["2519-173X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Symmetric Cryptology","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320310430","display_name":"TU Graz, Internationale Beziehungen und Mobilit\u00e4tsprogramme","ror":"https://ror.org/00d7xrm67"},{"id":"https://openalex.org/F4320320300","display_name":"European Commission","ror":"https://ror.org/00k4n6c32"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7164317840.pdf","grobid_xml":"https://content.openalex.org/works/W7164317840.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"The":[0],"construction":[1],"of":[2,12,50,75,124,132,197,200],"building":[3],"beyond-birthday-bound":[4],"secure":[5],"pseudorandom":[6,14],"functions":[7],"(PRFs)":[8],"from":[9],"the":[10,24,35,47,63,69,73,120,130,195,198,207],"Xor-sum":[11,74],"2":[13],"permutations":[15],"(PRPs)":[16],"has":[17],"been":[18],"known":[19],"since":[20],"EUROCRYPT":[21],"1998.":[22],"However,":[23],"first":[25,121],"concrete":[26,97],"instance":[27],"was":[28],"only":[29],"published":[30],"recently":[31],"at":[32,40],"FSE":[33],"2022:":[34],"low-latency":[36],"PRF":[37,64,70,108],"Orthros.":[38],"Subsequently,":[39],"ASIACRYPT":[41],"2024,":[42],"Fl\u00f3rez-Guti\u00e9rrez":[43],"et":[44],"al.":[45],"proposed":[46],"general":[48],"framework":[49],"ZIP":[51,138,173,201],"ciphers,":[52,174],"where":[53],"a":[54,106],"block":[55],"cipher":[56],"E1":[57],"E0":[58,65],"is":[59],"used":[60],"to":[61,137,178],"construct":[62],"E1-1":[66],"They":[67,84],"propose":[68,103],"ZIP-AES,":[71],"as":[72,105,112],"5":[76,81],"AES":[77],"encryption":[78],"rounds":[79,184],"and":[80,88,126,140,156,175],"decryption":[82],"rounds.":[83],"discuss":[85,141],"differential,":[86,154],"linear,":[87,155],"integral":[89,157,168],"distinguishers":[90],"for":[91,145,161,172,185],"this":[92,116,150],"construction,":[93],"but":[94,109,203],"provide":[95,119],"no":[96],"key":[98,146,158,169,186],"recovery":[99,147,159,170,187],"attacks.":[100],"Furthermore,":[101],"they":[102],"ZIP-GIFT":[104],"64-bit":[107],"leave":[110],"cryptanalysis":[111],"future":[113],"work.":[114],"In":[115,164],"work,":[117],"we":[118,166],"third-party":[122],"analysis":[123,193],"ZIP-AES":[125],"ZIP-GIFT.":[127],"We":[128,152],"investigate":[129],"challenges":[131],"applying":[133],"classical":[134],"cryptanalytic":[135],"techniques":[136,171],"ciphers":[139,202],"several":[142],"adaptations":[143],"needed":[144],"attacks":[148,160],"in":[149],"setting.":[151],"show":[153,176],"both":[162],"PRFs.":[163],"particular,":[165],"adapt":[167],"how":[177],"extend":[179],"differential":[180,190],"characteristics":[181],"by":[182],"some":[183],"using":[188],"truncated":[189],"distinguishers.":[191],"Our":[192],"deepens":[194],"understanding":[196],"security":[199,208],"does":[204],"not":[205],"threaten":[206],"claims.":[209]},"counts_by_year":[],"updated_date":"2026-08-25T07:29:55.448023","created_date":"2026-06-12T00:00:00"}