{"id":"https://openalex.org/W3170477465","doi":"https://doi.org/10.46586/tosc.v2021.i2.314-352","title":"Proving Resistance Against Infinitely Long Subspace Trails: How to Choose the Linear Layer","display_name":"Proving Resistance Against Infinitely Long Subspace Trails: How to Choose the Linear Layer","publication_year":2021,"publication_date":"2021-06-11","ids":{"openalex":"https://openalex.org/W3170477465","doi":"https://doi.org/10.46586/tosc.v2021.i2.314-352","mag":"3170477465"},"language":"en","primary_location":{"id":"doi:10.46586/tosc.v2021.i2.314-352","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tosc.v2021.i2.314-352","pdf_url":null,"source":{"id":"https://openalex.org/S4210236173","display_name":"IACR Transactions on Symmetric Cryptology","issn_l":"2519-173X","issn":["2519-173X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Symmetric Cryptology","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://doi.org/10.46586/tosc.v2021.i2.314-352","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5085134047","display_name":"Lorenzo Grassi","orcid":"https://orcid.org/0000-0003-1140-0520"},"institutions":[{"id":"https://openalex.org/I145872427","display_name":"Radboud University Nijmegen","ror":"https://ror.org/016xsfp80","country_code":"NL","type":"education","lineage":["https://openalex.org/I145872427"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Lorenzo Grassi","raw_affiliation_strings":["Digital Security Group, Radboud University, Nijmegen, Netherlands"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Digital Security Group, Radboud University, Nijmegen, Netherlands","institution_ids":["https://openalex.org/I145872427"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5068575128","display_name":"Christian Rechberger","orcid":"https://orcid.org/0000-0003-1280-6020"},"institutions":[{"id":"https://openalex.org/I4092182","display_name":"Graz University of Technology","ror":"https://ror.org/00d7xrm67","country_code":"AT","type":"education","lineage":["https://openalex.org/I4092182"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Christian Rechberger","raw_affiliation_strings":["Institute of Applied Information Processing and Communications (IAIK), Graz University of Technology, Graz, Austria"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Applied Information Processing and Communications (IAIK), Graz University of Technology, Graz, Austria","institution_ids":["https://openalex.org/I4092182"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5071625013","display_name":"Markus Schofnegger","orcid":null},"institutions":[{"id":"https://openalex.org/I4092182","display_name":"Graz University of Technology","ror":"https://ror.org/00d7xrm67","country_code":"AT","type":"education","lineage":["https://openalex.org/I4092182"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Markus Schofnegger","raw_affiliation_strings":["Institute of Applied Information Processing and Communications (IAIK), Graz University of Technology, Graz, Austria"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Applied Information Processing and Communications (IAIK), Graz University of Technology, Graz, Austria","institution_ids":["https://openalex.org/I4092182"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.0896,"has_fulltext":true,"cited_by_count":12,"citation_normalized_percentile":{"value":0.81278768,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"314","last_page":"352"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11130","display_name":"Coding theory and cryptography","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11130","display_name":"Coding theory and cryptography","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11797","display_name":"graph theory and CDMA systems","score":0.9901999831199646,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/irreducibility","display_name":"Irreducibility","score":0.5285742878913879},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.4892825782299042},{"id":"https://openalex.org/keywords/layer","display_name":"Layer (electronics)","score":0.48090291023254395},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.47654610872268677},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.4505220353603363},{"id":"https://openalex.org/keywords/matrix","display_name":"Matrix (chemical analysis)","score":0.4488353133201599},{"id":"https://openalex.org/keywords/invariant","display_name":"Invariant (physics)","score":0.4256308674812317},{"id":"https://openalex.org/keywords/discrete-mathematics","display_name":"Discrete mathematics","score":0.3527548909187317},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.31166213750839233},{"id":"https://openalex.org/keywords/pure-mathematics","display_name":"Pure mathematics","score":0.16010475158691406}],"concepts":[{"id":"https://openalex.org/C2776823524","wikidata":"https://www.wikidata.org/wiki/Q6073561","display_name":"Irreducibility","level":2,"score":0.5285742878913879},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.4892825782299042},{"id":"https://openalex.org/C2779227376","wikidata":"https://www.wikidata.org/wiki/Q6505497","display_name":"Layer (electronics)","level":2,"score":0.48090291023254395},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.47654610872268677},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.4505220353603363},{"id":"https://openalex.org/C106487976","wikidata":"https://www.wikidata.org/wiki/Q685816","display_name":"Matrix (chemical analysis)","level":2,"score":0.4488353133201599},{"id":"https://openalex.org/C190470478","wikidata":"https://www.wikidata.org/wiki/Q2370229","display_name":"Invariant (physics)","level":2,"score":0.4256308674812317},{"id":"https://openalex.org/C118615104","wikidata":"https://www.wikidata.org/wiki/Q121416","display_name":"Discrete mathematics","level":1,"score":0.3527548909187317},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.31166213750839233},{"id":"https://openalex.org/C202444582","wikidata":"https://www.wikidata.org/wiki/Q837863","display_name":"Pure mathematics","level":1,"score":0.16010475158691406},{"id":"https://openalex.org/C37914503","wikidata":"https://www.wikidata.org/wiki/Q156495","display_name":"Mathematical physics","level":1,"score":0.0},{"id":"https://openalex.org/C178790620","wikidata":"https://www.wikidata.org/wiki/Q11351","display_name":"Organic chemistry","level":1,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C159985019","wikidata":"https://www.wikidata.org/wiki/Q181790","display_name":"Composite material","level":1,"score":0.0},{"id":"https://openalex.org/C192562407","wikidata":"https://www.wikidata.org/wiki/Q228736","display_name":"Materials science","level":0,"score":0.0}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.46586/tosc.v2021.i2.314-352","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tosc.v2021.i2.314-352","pdf_url":null,"source":{"id":"https://openalex.org/S4210236173","display_name":"IACR Transactions on Symmetric Cryptology","issn_l":"2519-173X","issn":["2519-173X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Symmetric Cryptology","raw_type":"journal-article"},{"id":"pmh:ru:oai:repository.ubn.ru.nl:2066/233912","is_oa":true,"landing_page_url":"http://hdl.handle.net/2066/233912","pdf_url":"http://hdl.handle.net/2066/233912","source":{"id":"https://openalex.org/S4306401843","display_name":"Data Archiving and Networked Services (DANS)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1322597698","host_organization_name":"Royal Netherlands Academy of Arts and Sciences","host_organization_lineage":["https://openalex.org/I1322597698"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IACR Transactions on Symmetric Cryptology, 2021, 314 - 352","raw_type":"info:eu-repo/semantics/article"},{"id":"pmh:oai:doaj.org/article:201d4c6762724c01b64adc24bc75f02c","is_oa":true,"landing_page_url":"https://doaj.org/article/201d4c6762724c01b64adc24bc75f02c","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IACR Transactions on Symmetric Cryptology, Vol 2021, Iss 2 (2021)","raw_type":"article"},{"id":"pmh:oai:repository.ubn.ru.nl:2066/233912","is_oa":false,"landing_page_url":"https://repository.ubn.ru.nl/handle/2066/233912","pdf_url":null,"source":{"id":"https://openalex.org/S4306401067","display_name":"Radboud Repository (Radboud University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I145872427","host_organization_name":"Radboud University Nijmegen","host_organization_lineage":["https://openalex.org/I145872427"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IACR Transactions on Symmetric Cryptology, 2021, 2, pp. 314-352","raw_type":"Article / Letter to editor"}],"best_oa_location":{"id":"doi:10.46586/tosc.v2021.i2.314-352","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tosc.v2021.i2.314-352","pdf_url":null,"source":{"id":"https://openalex.org/S4210236173","display_name":"IACR Transactions on Symmetric Cryptology","issn_l":"2519-173X","issn":["2519-173X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Symmetric Cryptology","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":45,"referenced_works":["https://openalex.org/W83473285","https://openalex.org/W162464270","https://openalex.org/W584705194","https://openalex.org/W930621015","https://openalex.org/W1035500135","https://openalex.org/W1569947330","https://openalex.org/W1570310736","https://openalex.org/W1629301835","https://openalex.org/W1778060996","https://openalex.org/W1964723977","https://openalex.org/W1979802565","https://openalex.org/W2111902481","https://openalex.org/W2234576048","https://openalex.org/W2293947265","https://openalex.org/W2295458874","https://openalex.org/W2469100438","https://openalex.org/W2478275166","https://openalex.org/W2504919933","https://openalex.org/W2529842300","https://openalex.org/W2552640487","https://openalex.org/W2591966525","https://openalex.org/W2728494734","https://openalex.org/W2770809732","https://openalex.org/W2795060474","https://openalex.org/W2796051658","https://openalex.org/W2893822137","https://openalex.org/W2894097363","https://openalex.org/W2907544222","https://openalex.org/W2947157832","https://openalex.org/W2953015727","https://openalex.org/W2977846258","https://openalex.org/W3011201404","https://openalex.org/W3013174546","https://openalex.org/W3048736713","https://openalex.org/W3091883733","https://openalex.org/W3096308802","https://openalex.org/W3133710726","https://openalex.org/W3184032396","https://openalex.org/W3204374715","https://openalex.org/W4231852103","https://openalex.org/W4236635680","https://openalex.org/W4251810237","https://openalex.org/W4253496694","https://openalex.org/W4293163450","https://openalex.org/W4308269287"],"related_works":["https://openalex.org/W1630580488","https://openalex.org/W2007170860","https://openalex.org/W4319349750","https://openalex.org/W2951407429","https://openalex.org/W4246385323","https://openalex.org/W2145139444","https://openalex.org/W1656119201","https://openalex.org/W2922319751","https://openalex.org/W1980266083","https://openalex.org/W4383993686"],"abstract_inverted_index":{"Designing":[0],"cryptographic":[1],"permutations":[2],"and":[3,107,110,114,124,190,228],"block":[4],"ciphers":[5],"using":[6],"a":[7,40,146,152,165,213],"substitutionpermutation":[8],"network":[9],"(SPN)":[10],"approach":[11],"where":[12],"the":[13,19,51,54,58,61,128,132,137,141,169,188,191,194,198,202,217],"nonlinear":[14],"part":[15],"does":[16],"not":[17],"cover":[18],"entire":[20],"state":[21],"has":[22],"recently":[23],"gained":[24],"attention":[25],"due":[26],"to":[27,47,72,94,135,187],"favorable":[28],"implementation":[29],"characteristics":[30],"in":[31],"various":[32],"scenarios.For":[33],"word-oriented":[34],"partial":[35,231],"SPN":[36],"(P-SPN)":[37],"schemes":[38],"with":[39,85,113,224,230],"fixed":[41],"linear":[42,55,133,154,170,203],"layer,":[43],"our":[44,208],"goal":[45],"is":[46,90,156,185],"better":[48],"understand":[49],"how":[50],"details":[52],"of":[53,60,193,197],"layer":[56,134,155,171],"affect":[57],"security":[59],"construction.":[62],"In":[63],"this":[64,99],"paper,":[65],"we":[66,102,120,144,163],"derive":[67],"conditions":[68,126],"that":[69,130,148,176,200],"allow":[70],"us":[71],"either":[73],"set":[74],"up":[75],"or":[76],"prevent":[77,136],"attacks":[78],"based":[79,158],"on":[80,98,159,216],"infinitely":[81,178],"long":[82,179],"truncated":[83,180],"differentials":[84],"probability":[86],"1.":[87],"Our":[88],"analysis":[89],"rather":[91],"broad":[92],"compared":[93],"earlier":[95],"independent":[96],"work":[97],"problem":[100],"since":[101],"consider":[103],"(1)":[104],"both":[105],"invariant":[106],"non-invariant/iterative":[108],"trails,":[109],"(2)":[111],"trails":[112],"without":[115],"active":[116],"S-boxes.For":[117],"these":[118,160],"cases,":[119],"provide":[121],"rigorous":[122],"sufficient":[123,166],"necessary":[125],"for":[127,168],"matrix":[129,199],"defines":[131,201],"analyzed":[138],"attacks.":[139],"On":[140],"practical":[142],"side,":[143],"present":[145],"tool":[147],"can":[149],"determine":[150],"whether":[151],"given":[153],"vulnerable":[157],"results.":[161],"Furthermore,":[162],"propose":[164],"condition":[167,184],"that,":[172],"if":[173],"satisfied,":[174],"ensures":[175],"no":[177],"differential":[181],"exists.":[182],"This":[183],"related":[186],"degree":[189],"irreducibility":[192],"minimal":[195],"polynomial":[196],"layer.":[204],"Besides":[205],"P-SPN":[206],"schemes,":[207],"observations":[209],"may":[210],"also":[211],"have":[212],"crucial":[214],"impact":[215],"Hades":[218],"design":[219],"strategy,":[220],"which":[221],"mixes":[222],"rounds":[223,229],"full":[225],"S-box":[226,232],"layers":[227],"layers.":[233]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":3},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":1}],"updated_date":"2026-07-02T09:51:11.867554","created_date":"2025-10-10T00:00:00"}