{"id":"https://openalex.org/W4295067058","doi":"https://doi.org/10.46586/tosc.v2022.i3.102-122","title":"New Low-Memory Algebraic Attacks on LowMC in the Picnic Setting","display_name":"New Low-Memory Algebraic Attacks on LowMC in the Picnic Setting","publication_year":2022,"publication_date":"2022-09-09","ids":{"openalex":"https://openalex.org/W4295067058","doi":"https://doi.org/10.46586/tosc.v2022.i3.102-122"},"language":"en","primary_location":{"id":"doi:10.46586/tosc.v2022.i3.102-122","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tosc.v2022.i3.102-122","pdf_url":"https://tosc.iacr.org/index.php/ToSC/article/download/9851/9351","source":{"id":"https://openalex.org/S4210236173","display_name":"IACR Transactions on Symmetric Cryptology","issn_l":"2519-173X","issn":["2519-173X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Symmetric Cryptology","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://tosc.iacr.org/index.php/ToSC/article/download/9851/9351","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5028727355","display_name":"Fukang Liu","orcid":"https://orcid.org/0000-0002-0551-580X"},"institutions":[{"id":"https://openalex.org/I180941496","display_name":"University of Hyogo","ror":"https://ror.org/0151bmh98","country_code":"JP","type":"education","lineage":["https://openalex.org/I180941496"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Fukang Liu","raw_affiliation_strings":["University of Hyogo, Hyogo, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Hyogo, Hyogo, Japan","institution_ids":["https://openalex.org/I180941496"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5086309954","display_name":"Willi Meier","orcid":"https://orcid.org/0000-0003-4594-1501"},"institutions":[{"id":"https://openalex.org/I2972652528","display_name":"FHNW University of Applied Sciences and Arts Northwestern Switzerland","ror":"https://ror.org/04mq2g308","country_code":"CH","type":"education","lineage":["https://openalex.org/I2972652528"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Willi Meier","raw_affiliation_strings":["University of Applied Sciences and Arts Northwestern Switzerland (FHNW), Windisch, Switzerland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Applied Sciences and Arts Northwestern Switzerland (FHNW), Windisch, Switzerland","institution_ids":["https://openalex.org/I2972652528"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5058432784","display_name":"Santanu Sarkar","orcid":"https://orcid.org/0000-0001-6821-920X"},"institutions":[{"id":"https://openalex.org/I24676775","display_name":"Indian Institute of Technology Madras","ror":"https://ror.org/03v0r5n49","country_code":"IN","type":"education","lineage":["https://openalex.org/I24676775"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Santanu Sarkar","raw_affiliation_strings":["Indian Institute of Technology Madras, Chennai, India"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Indian Institute of Technology Madras, Chennai, India","institution_ids":["https://openalex.org/I24676775"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5056480052","display_name":"Takanori Isobe","orcid":"https://orcid.org/0000-0003-4253-5567"},"institutions":[{"id":"https://openalex.org/I180941496","display_name":"University of Hyogo","ror":"https://ror.org/0151bmh98","country_code":"JP","type":"education","lineage":["https://openalex.org/I180941496"]},{"id":"https://openalex.org/I4210086780","display_name":"Japan Science and Technology Agency","ror":"https://ror.org/00097mb19","country_code":"JP","type":"government","lineage":["https://openalex.org/I1319490839","https://openalex.org/I4210086780"]},{"id":"https://openalex.org/I90023481","display_name":"National Institute of Information and Communications Technology","ror":"https://ror.org/016bgq349","country_code":"JP","type":"facility","lineage":["https://openalex.org/I90023481"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Takanori Isobe","raw_affiliation_strings":["University of Hyogo, Hyogo, Japan; National Institute of Information and Communications Technology (NICT), Tokyo, Japan; PRESTO, Japan Science and Technology Agency, Tokyo, Japan","National Institute of Information and Communications Technology (NICT), Tokyo, Japan","PRESTO, Japan Science and Technology Agency, Tokyo, Japan","University of Hyogo, Hyogo, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Hyogo, Hyogo, Japan; National Institute of Information and Communications Technology (NICT), Tokyo, Japan; PRESTO, Japan Science and Technology Agency, Tokyo, Japan","institution_ids":["https://openalex.org/I90023481"]},{"raw_affiliation_string":"National Institute of Information and Communications Technology (NICT), Tokyo, Japan","institution_ids":["https://openalex.org/I90023481"]},{"raw_affiliation_string":"PRESTO, Japan Science and Technology Agency, Tokyo, Japan","institution_ids":["https://openalex.org/I4210086780"]},{"raw_affiliation_string":"University of Hyogo, Hyogo, Japan","institution_ids":["https://openalex.org/I180941496"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.859,"has_fulltext":true,"cited_by_count":17,"citation_normalized_percentile":{"value":0.87221237,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"102","last_page":"122"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11130","display_name":"Coding theory and cryptography","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11130","display_name":"Coding theory and cryptography","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9918000102043152,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7335010766983032},{"id":"https://openalex.org/keywords/picnic","display_name":"Picnic","score":0.7232562303543091},{"id":"https://openalex.org/keywords/plaintext","display_name":"Plaintext","score":0.5129873156547546},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.4426388442516327},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.42605504393577576},{"id":"https://openalex.org/keywords/symmetric-key-algorithm","display_name":"Symmetric-key algorithm","score":0.4112752676010132},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.4021759033203125},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.371724009513855},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3677203059196472},{"id":"https://openalex.org/keywords/public-key-cryptography","display_name":"Public-key cryptography","score":0.3347548842430115}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7335010766983032},{"id":"https://openalex.org/C2776829547","wikidata":"https://www.wikidata.org/wiki/Q506294","display_name":"Picnic","level":2,"score":0.7232562303543091},{"id":"https://openalex.org/C92717368","wikidata":"https://www.wikidata.org/wiki/Q1162538","display_name":"Plaintext","level":3,"score":0.5129873156547546},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.4426388442516327},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.42605504393577576},{"id":"https://openalex.org/C65302260","wikidata":"https://www.wikidata.org/wiki/Q327675","display_name":"Symmetric-key algorithm","level":4,"score":0.4112752676010132},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.4021759033203125},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.371724009513855},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3677203059196472},{"id":"https://openalex.org/C203062551","wikidata":"https://www.wikidata.org/wiki/Q201339","display_name":"Public-key cryptography","level":3,"score":0.3347548842430115},{"id":"https://openalex.org/C18903297","wikidata":"https://www.wikidata.org/wiki/Q7150","display_name":"Ecology","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.46586/tosc.v2022.i3.102-122","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tosc.v2022.i3.102-122","pdf_url":"https://tosc.iacr.org/index.php/ToSC/article/download/9851/9351","source":{"id":"https://openalex.org/S4210236173","display_name":"IACR Transactions on Symmetric Cryptology","issn_l":"2519-173X","issn":["2519-173X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Symmetric Cryptology","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:523c7c30ad89409a896c031fb799d53b","is_oa":false,"landing_page_url":"https://doaj.org/article/523c7c30ad89409a896c031fb799d53b","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IACR Transactions on Symmetric Cryptology, Vol 2022, Iss 3 (2022)","raw_type":"article"},{"id":"pmh:oai:doaj.org/article:e6b298044b2c4fa6831f6813594f3b73","is_oa":false,"landing_page_url":"https://doaj.org/article/e6b298044b2c4fa6831f6813594f3b73","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IACR Transactions on Symmetric Cryptology, Vol 2022, Iss 3 (2022)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.46586/tosc.v2022.i3.102-122","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tosc.v2022.i3.102-122","pdf_url":"https://tosc.iacr.org/index.php/ToSC/article/download/9851/9351","source":{"id":"https://openalex.org/S4210236173","display_name":"IACR Transactions on Symmetric Cryptology","issn_l":"2519-173X","issn":["2519-173X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Symmetric Cryptology","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1613875913","display_name":null,"funder_award_id":"JPJ000254\u201d","funder_id":"https://openalex.org/F4320325628","funder_display_name":"Ministry of Internal Affairs and Communications"},{"id":"https://openalex.org/G2731024361","display_name":"Cryptanalysis and Design of Lightweight Symmetric-key Cryptography and Its Application to IoT","funder_award_id":"19H02141","funder_id":"https://openalex.org/F4320334764","funder_display_name":"Japan Society for the Promotion of Science"},{"id":"https://openalex.org/G2996491227","display_name":null,"funder_award_id":"JPMJPR2031","funder_id":"https://openalex.org/F4320338111","funder_display_name":"Precursory Research for Embryonic Science and Technology"},{"id":"https://openalex.org/G4809265451","display_name":null,"funder_award_id":"19H02141","funder_id":"https://openalex.org/F4320338111","funder_display_name":"Precursory Research for Embryonic Science and Technology"}],"funders":[{"id":"https://openalex.org/F4320325628","display_name":"Ministry of Internal Affairs and Communications","ror":"https://ror.org/00vs1pz50"},{"id":"https://openalex.org/F4320334764","display_name":"Japan Society for the Promotion of Science","ror":"https://ror.org/00hhkn466"},{"id":"https://openalex.org/F4320338111","display_name":"Precursory Research for Embryonic Science and Technology","ror":null}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4295067058.pdf","grobid_xml":"https://content.openalex.org/works/W4295067058.grobid-xml"},"referenced_works_count":22,"referenced_works":["https://openalex.org/W178840540","https://openalex.org/W1542020576","https://openalex.org/W1588952639","https://openalex.org/W2160494425","https://openalex.org/W2295458874","https://openalex.org/W2485873601","https://openalex.org/W2568071471","https://openalex.org/W2612047169","https://openalex.org/W2614074621","https://openalex.org/W2620600500","https://openalex.org/W2798373574","https://openalex.org/W2949470297","https://openalex.org/W2949718400","https://openalex.org/W3023274882","https://openalex.org/W3090660998","https://openalex.org/W3111977394","https://openalex.org/W3169109595","https://openalex.org/W3203698088","https://openalex.org/W3206091168","https://openalex.org/W4253987147","https://openalex.org/W4256634395","https://openalex.org/W4317928326"],"related_works":["https://openalex.org/W3094394851","https://openalex.org/W2899756598","https://openalex.org/W2940359311","https://openalex.org/W2487175166","https://openalex.org/W2186199838","https://openalex.org/W2387717154","https://openalex.org/W2952130398","https://openalex.org/W2068729501","https://openalex.org/W2155899207","https://openalex.org/W3013039523"],"abstract_inverted_index":{"The":[0,57],"security":[1,50],"of":[2,14,19,30,51,171,177,181,241,253,260],"the":[3,12,16,31,49,54,88,100,108,159,168,175,201,215,234,238,254,266],"post-quantum":[4,37],"signature":[5],"scheme":[6],"Picnic":[7,27,55],"is":[8,28,118,135,244,269,278],"highly":[9],"related":[10],"to":[11,47,162,165,196,222,280],"difficulty":[13],"recovering":[15],"secret":[17],"key":[18],"LowMC":[20,52,61,75,92,111,126,185,205],"from":[21,218,265],"a":[22,113,121,178],"single":[23],"plaintext-ciphertext":[24],"pair.":[25],"Since":[26],"one":[29],"alternate":[32],"third-round":[33],"candidates":[34],"in":[35,53,67,86,112],"NIST":[36],"cryptography":[38],"standardization":[39],"process,":[40],"it":[41],"has":[42],"become":[43],"urgent":[44],"and":[45,147,283],"important":[46],"evaluate":[48],"setting.":[56],"best":[58,89],"attacks":[59,90,109,193,231,243,263],"on":[60,91,110,124],"with":[62,71,76,99,127,131,187,207],"full":[63,128],"S-box":[64,129,189],"layers":[65,130],"used":[66],"Picnic3":[68],"were":[69,93],"achieved":[70],"Dinur\u2019s":[72,154,172],"algorithm.":[73,155],"For":[74,184,204],"partial":[77],"nonlinear":[78],"layers,":[79],"e.g.":[80],"10":[81,208],"S-boxes":[82,209],"per":[83,190,210],"round":[84],"adopted":[85],"Picnic2,":[87],"published":[94],"by":[95],"Banik":[96],"et":[97,141],"al.":[98],"meet-in-the-middle":[101],"(MITM)":[102],"method.In":[103],"this":[104],"paper,":[105],"we":[106,157,212],"improve":[107],"model":[114],"where":[115],"memory":[116,133,169,216],"consumption":[117],"costly.":[119],"First,":[120],"new":[122,229,262],"attack":[123,146,161],"3-round":[125,160],"negligible":[132],"complexity":[134,170,217,240],"found,":[136],"which":[137],"can":[138,148,213,285],"outperform":[139],"Bouillaguet":[140],"al.\u2019s":[142],"fast":[143],"exhaustive":[144],"search":[145],"achieve":[149],"better":[150],"time-memory":[151],"tradeoffs":[152],"than":[153,200,233,251],"Second,":[156],"extend":[158],"4":[163],"rounds":[164],"significantly":[166],"reduce":[167,214],"algorithm":[173],"at":[174],"sacrifice":[176],"small":[179],"factor":[180],"time":[182,239],"complexity.":[183],"instances":[186,206],"1":[188],"round,":[191,211],"our":[192,228,242,261],"are":[194],"shown":[195],"be":[197,286],"much":[198],"faster":[199],"MITM":[202,235,255],"attacks.":[203,256],"32GB":[219],"(238":[220],"bits)":[221,226],"only":[223,273],"256KB":[224],"(221":[225],"using":[227],"algebraic":[230],"rather":[232],"attacks,":[236],"while":[237],"about":[245],"23.2":[246],"\u223c":[247],"25":[248],"times":[249],"higher":[250],"that":[252],"A":[257],"notable":[258],"feature":[259],"(apart":[264],"4-round":[267],"attack)":[268],"their":[270],"simplicity.":[271],"Specifically,":[272],"some":[274],"basic":[275],"linear":[276],"algebra":[277],"required":[279],"understand":[281],"them":[282],"they":[284],"easily":[287],"implemented.":[288]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":4},{"year":2024,"cited_by_count":6},{"year":2023,"cited_by_count":5},{"year":2022,"cited_by_count":1}],"updated_date":"2026-08-01T09:00:35.917206","created_date":"2025-10-10T00:00:00"}