{"id":"https://openalex.org/W3126334997","doi":"https://doi.org/10.46586/tosc.v2021.i2.104-139","title":"Weak Keys in Reduced AEGIS and Tiaoxin","display_name":"Weak Keys in Reduced AEGIS and Tiaoxin","publication_year":2021,"publication_date":"2021-06-11","ids":{"openalex":"https://openalex.org/W3126334997","doi":"https://doi.org/10.46586/tosc.v2021.i2.104-139","mag":"3126334997"},"language":"en","primary_location":{"id":"doi:10.46586/tosc.v2021.i2.104-139","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tosc.v2021.i2.104-139","pdf_url":"https://tosc.iacr.org/index.php/ToSC/article/download/8907/8483","source":{"id":"https://openalex.org/S4210236173","display_name":"IACR Transactions on Symmetric Cryptology","issn_l":"2519-173X","issn":["2519-173X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Symmetric Cryptology","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://tosc.iacr.org/index.php/ToSC/article/download/8907/8483","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5028727355","display_name":"Fukang Liu","orcid":"https://orcid.org/0000-0002-0551-580X"},"institutions":[{"id":"https://openalex.org/I180941496","display_name":"University of Hyogo","ror":"https://ror.org/0151bmh98","country_code":"JP","type":"education","lineage":["https://openalex.org/I180941496"]},{"id":"https://openalex.org/I21945476","display_name":"Shanghai Normal University","ror":"https://ror.org/01cxqmw89","country_code":"CN","type":"education","lineage":["https://openalex.org/I21945476"]},{"id":"https://openalex.org/I66867065","display_name":"East China Normal University","ror":"https://ror.org/02n96ep67","country_code":"CN","type":"education","lineage":["https://openalex.org/I66867065"]}],"countries":["CN","JP"],"is_corresponding":false,"raw_author_name":"Fukang Liu","raw_affiliation_strings":["East China Normal University, Shanghai, China; University of Hyogo, Hyogo, Japan","East China Normal University, Shanghai, China","University of Hyogo, Hyogo, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"East China Normal University, Shanghai, China; University of Hyogo, Hyogo, Japan","institution_ids":["https://openalex.org/I21945476","https://openalex.org/I66867065"]},{"raw_affiliation_string":"East China Normal University, Shanghai, China","institution_ids":["https://openalex.org/I66867065"]},{"raw_affiliation_string":"University of Hyogo, Hyogo, Japan","institution_ids":["https://openalex.org/I180941496"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5056480052","display_name":"Takanori Isobe","orcid":"https://orcid.org/0000-0003-4253-5567"},"institutions":[{"id":"https://openalex.org/I180941496","display_name":"University of Hyogo","ror":"https://ror.org/0151bmh98","country_code":"JP","type":"education","lineage":["https://openalex.org/I180941496"]},{"id":"https://openalex.org/I4210086780","display_name":"Japan Science and Technology Agency","ror":"https://ror.org/00097mb19","country_code":"JP","type":"government","lineage":["https://openalex.org/I1319490839","https://openalex.org/I4210086780"]},{"id":"https://openalex.org/I90023481","display_name":"National Institute of Information and Communications Technology","ror":"https://ror.org/016bgq349","country_code":"JP","type":"facility","lineage":["https://openalex.org/I90023481"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Takanori Isobe","raw_affiliation_strings":["University of Hyogo, Hyogo, Japan; National Institute of Information and Communications Technology, Tokyo, Japan; PRESTO, Japan Science and Technology Agency, Tokyo, Japan","National Institute of Information and Communications Technology, Tokyo, Japan","PRESTO, Japan Science and Technology Agency, Tokyo, Japan","University of Hyogo, Hyogo, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Hyogo, Hyogo, Japan; National Institute of Information and Communications Technology, Tokyo, Japan; PRESTO, Japan Science and Technology Agency, Tokyo, Japan","institution_ids":["https://openalex.org/I90023481"]},{"raw_affiliation_string":"National Institute of Information and Communications Technology, Tokyo, Japan","institution_ids":["https://openalex.org/I90023481"]},{"raw_affiliation_string":"PRESTO, Japan Science and Technology Agency, Tokyo, Japan","institution_ids":["https://openalex.org/I4210086780"]},{"raw_affiliation_string":"University of Hyogo, Hyogo, Japan","institution_ids":["https://openalex.org/I180941496"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5086309954","display_name":"Willi Meier","orcid":"https://orcid.org/0000-0003-4594-1501"},"institutions":[{"id":"https://openalex.org/I2972652528","display_name":"FHNW University of Applied Sciences and Arts Northwestern Switzerland","ror":"https://ror.org/04mq2g308","country_code":"CH","type":"education","lineage":["https://openalex.org/I2972652528"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Willi Meier","raw_affiliation_strings":["University of Applied Sciences and Arts Northwestern Switzerland, Windisch, Switzerland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Applied Sciences and Arts Northwestern Switzerland, Windisch, Switzerland","institution_ids":["https://openalex.org/I2972652528"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5008561889","display_name":"Kosei Sakamoto","orcid":null},"institutions":[{"id":"https://openalex.org/I180941496","display_name":"University of Hyogo","ror":"https://ror.org/0151bmh98","country_code":"JP","type":"education","lineage":["https://openalex.org/I180941496"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Kosei Sakamoto","raw_affiliation_strings":["University of Hyogo, Hyogo, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Hyogo, Hyogo, Japan","institution_ids":["https://openalex.org/I180941496"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":6,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.173,"has_fulltext":false,"cited_by_count":14,"citation_normalized_percentile":{"value":0.82104587,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"104","last_page":"139"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11017","display_name":"Chaos-based Image/Signal Encryption","score":0.9948999881744385,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11130","display_name":"Coding theory and cryptography","score":0.9944000244140625,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7310283780097961},{"id":"https://openalex.org/keywords/initialization","display_name":"Initialization","score":0.5973830819129944},{"id":"https://openalex.org/keywords/cryptographic-nonce","display_name":"Cryptographic nonce","score":0.5772298574447632},{"id":"https://openalex.org/keywords/stream-cipher","display_name":"Stream cipher","score":0.5462018251419067},{"id":"https://openalex.org/keywords/cryptanalysis","display_name":"Cryptanalysis","score":0.5417166352272034},{"id":"https://openalex.org/keywords/arithmetic","display_name":"Arithmetic","score":0.499983549118042},{"id":"https://openalex.org/keywords/block-cipher","display_name":"Block cipher","score":0.4468365013599396},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.4200286865234375},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.4090716540813446},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.35973772406578064},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.3278643488883972},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.23887985944747925},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.20970875024795532},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.10413718223571777},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.08412328362464905}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7310283780097961},{"id":"https://openalex.org/C114466953","wikidata":"https://www.wikidata.org/wiki/Q6034165","display_name":"Initialization","level":2,"score":0.5973830819129944},{"id":"https://openalex.org/C9996903","wikidata":"https://www.wikidata.org/wiki/Q1749235","display_name":"Cryptographic nonce","level":3,"score":0.5772298574447632},{"id":"https://openalex.org/C92950451","wikidata":"https://www.wikidata.org/wiki/Q864718","display_name":"Stream cipher","level":3,"score":0.5462018251419067},{"id":"https://openalex.org/C181149355","wikidata":"https://www.wikidata.org/wiki/Q897511","display_name":"Cryptanalysis","level":3,"score":0.5417166352272034},{"id":"https://openalex.org/C94375191","wikidata":"https://www.wikidata.org/wiki/Q11205","display_name":"Arithmetic","level":1,"score":0.499983549118042},{"id":"https://openalex.org/C106544461","wikidata":"https://www.wikidata.org/wiki/Q543151","display_name":"Block cipher","level":3,"score":0.4468365013599396},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.4200286865234375},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.4090716540813446},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.35973772406578064},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.3278643488883972},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.23887985944747925},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.20970875024795532},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.10413718223571777},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.08412328362464905}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.46586/tosc.v2021.i2.104-139","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tosc.v2021.i2.104-139","pdf_url":"https://tosc.iacr.org/index.php/ToSC/article/download/8907/8483","source":{"id":"https://openalex.org/S4210236173","display_name":"IACR Transactions on Symmetric Cryptology","issn_l":"2519-173X","issn":["2519-173X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Symmetric Cryptology","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:e4faf97c88c3401d8a4923cf2b734c8b","is_oa":true,"landing_page_url":"https://doaj.org/article/e4faf97c88c3401d8a4923cf2b734c8b","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IACR Transactions on Symmetric Cryptology, Vol 2021, Iss 2 (2021)","raw_type":"article"},{"id":"pmh:oai:irdb.nii.ac.jp:00897:0005860742","is_oa":false,"landing_page_url":"http://t2r2.star.titech.ac.jp/cgi-bin/publicationinfo.cgi?q_publication_content_number=CTT100894215","pdf_url":null,"source":{"id":"https://openalex.org/S7407056385","display_name":"Institutional Repositories DataBase (IRDB)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I184597095","host_organization_name":"National Institute of Informatics","host_organization_lineage":["https://openalex.org/I184597095"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IACR Transactions on Symmetric Cryptology","raw_type":"journal article"}],"best_oa_location":{"id":"doi:10.46586/tosc.v2021.i2.104-139","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tosc.v2021.i2.104-139","pdf_url":"https://tosc.iacr.org/index.php/ToSC/article/download/8907/8483","source":{"id":"https://openalex.org/S4210236173","display_name":"IACR Transactions on Symmetric Cryptology","issn_l":"2519-173X","issn":["2519-173X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Symmetric Cryptology","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2455618063","display_name":null,"funder_award_id":"61961146004","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G2731024361","display_name":"Cryptanalysis and Design of Lightweight Symmetric-key Cryptography and Its Application to IoT","funder_award_id":"19H02141","funder_id":"https://openalex.org/F4320334764","funder_display_name":"Japan Society for the Promotion of Science"},{"id":"https://openalex.org/G6540867945","display_name":"\u8efd\u91cf\u5171\u901a\u9375\u6697\u53f7\u306e\u8a2d\u8a08\uff0c\u304a\u3088\u3073\u305d\u306e\u5b89\u5168\u6027\u8a55\u4fa1","funder_award_id":"20J23526","funder_id":"https://openalex.org/F4320334764","funder_display_name":"Japan Society for the Promotion of Science"},{"id":"https://openalex.org/G7663663274","display_name":null,"funder_award_id":"62072181","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320334764","display_name":"Japan Society for the Promotion of Science","ror":"https://ror.org/00hhkn466"},{"id":"https://openalex.org/F4320335839","display_name":"National Institute of Information and Communications Technology","ror":"https://ror.org/016bgq349"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3126334997.pdf","grobid_xml":"https://content.openalex.org/works/W3126334997.grobid-xml"},"referenced_works_count":29,"referenced_works":["https://openalex.org/W83473285","https://openalex.org/W1525447969","https://openalex.org/W1556212265","https://openalex.org/W1572847050","https://openalex.org/W1590269592","https://openalex.org/W1656731780","https://openalex.org/W2103239853","https://openalex.org/W2111902481","https://openalex.org/W2116204329","https://openalex.org/W2160494425","https://openalex.org/W2166473670","https://openalex.org/W2211781628","https://openalex.org/W2476423892","https://openalex.org/W2486115487","https://openalex.org/W2796051658","https://openalex.org/W2810908956","https://openalex.org/W2884742479","https://openalex.org/W2949078646","https://openalex.org/W2949935206","https://openalex.org/W2952124218","https://openalex.org/W2952350086","https://openalex.org/W2991554051","https://openalex.org/W3087218913","https://openalex.org/W3091007029","https://openalex.org/W4210850766","https://openalex.org/W4231219864","https://openalex.org/W4236843922","https://openalex.org/W4251685926","https://openalex.org/W4381516248"],"related_works":["https://openalex.org/W4253338219","https://openalex.org/W2983990617","https://openalex.org/W2955290832","https://openalex.org/W2967757647","https://openalex.org/W2396343634","https://openalex.org/W2766321958","https://openalex.org/W3013793794","https://openalex.org/W3159283027","https://openalex.org/W1978066163","https://openalex.org/W149964843"],"abstract_inverted_index":{"AEGIS-128":[0,17,198],"and":[1,55,77,155,166,199,213,282],"Tiaoxin-346":[2],"(Tiaoxin":[3],"for":[4,25,100,231],"short)":[5],"are":[6,44,120,186],"two":[7],"AES-based":[8],"primitives":[9,36,102],"submitted":[10],"to":[11,83,113,122,130,142,171,205,224,280],"the":[12,22,48,56,64,69,81,92,109,114,132,144,147,153,156,219,221,226,235,245,256,261,274,277],"CAESAR":[13,94],"competition.":[14],"Among":[15],"them,":[16],"has":[18,80],"been":[19],"selected":[20],"in":[21,63,116,150,196],"final":[23],"portfolio":[24],"high-performance":[26],"applications,":[27],"while":[28],"Tiaoxin":[29,242],"is":[30,71,97,104,126,141,229],"a":[31,38,127,160,164,180,248],"third-round":[32],"candidate.":[33],"Although":[34],"both":[35,101,117],"adopt":[37],"stream":[39,51],"cipher":[40],"based":[41],"design,":[42],"they":[43],"quite":[45],"different":[46],"from":[47],"well-known":[49],"bit-oriented":[50],"ciphers":[52],"like":[53],"Trivium":[54],"Grain":[57],"family.":[58],"Their":[59],"common":[60,128],"feature":[61],"consists":[62],"round":[65,88],"update":[66],"function,":[67],"where":[68],"state":[70],"divided":[72],"into":[73],"several":[74,187],"128-bit":[75,161],"words":[76],"each":[78,195],"word":[79,162],"option":[82],"pass":[84],"through":[85],"an":[86],"AES":[87],"or":[89],"not.":[90],"During":[91],"6-year":[93],"competition,":[95],"it":[96],"surprising":[98],"that":[99,184,269],"there":[103,125,185],"no":[105],"third-party":[106],"cryptanalysis":[107],"of":[108,134,146,152,189,247,260,264,276],"initialization":[110,136,265],"phase.":[111],"Due":[112],"similarities":[115],"primitives,":[118],"we":[119,182],"motivated":[121],"investigate":[123],"whether":[124],"way":[129],"evaluate":[131],"security":[133],"their":[135],"phases.":[137],"Our":[138],"technical":[139],"contribution":[140],"write":[143],"expressions":[145,174],"internal":[148],"states":[149],"terms":[151],"nonce":[154],"key":[157,228,237],"by":[158,175],"treating":[159],"as":[163],"unit":[165],"then":[167],"carefully":[168],"study":[169],"how":[170],"simplify":[172],"these":[173],"adding":[176],"proper":[177],"conditions.":[178],"As":[179],"result,":[181],"find":[183],"groups":[188],"weak":[190,227,236,249],"keys":[191,194],"with":[192,209,252],"296":[193],"5-round":[197,232],"8-round":[200,241],"Tiaoxin,":[201],"which":[202],"allows":[203],"us":[204],"construct":[206],"integral":[207],"distinguishers":[208],"time":[210,222],"complexity":[211,215,223],"232":[212],"data":[214],"232.":[216],"Based":[217],"on":[218,240],"distinguisher,":[220],"recover":[225],"272":[230],"AEGIS-128.":[233],"However,":[234],"recovery":[238],"attack":[239],"will":[243],"require":[244],"usage":[246],"constant":[250],"occurring":[251],"probability":[253],"2\u221232.":[254],"All":[255],"attacks":[257],"reach":[258],"half":[259],"total":[262],"number":[263],"rounds.":[266],"We":[267],"expect":[268],"this":[270],"work":[271],"can":[272],"advance":[273],"understanding":[275],"designs":[278],"similar":[279],"AEGIS":[281],"Tiaoxin.":[283]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":4},{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":3},{"year":2021,"cited_by_count":1}],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2025-10-10T00:00:00"}