{"id":"https://openalex.org/W4311870646","doi":"https://doi.org/10.46586/tosc.v2022.i4.145-178","title":"Improved Differential and Linear Trail Bounds for ASCON","display_name":"Improved Differential and Linear Trail Bounds for ASCON","publication_year":2022,"publication_date":"2022-12-07","ids":{"openalex":"https://openalex.org/W4311870646","doi":"https://doi.org/10.46586/tosc.v2022.i4.145-178"},"language":"en","primary_location":{"id":"doi:10.46586/tosc.v2022.i4.145-178","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tosc.v2022.i4.145-178","pdf_url":"https://tosc.iacr.org/index.php/ToSC/article/download/9975/9473","source":{"id":"https://openalex.org/S4210236173","display_name":"IACR Transactions on Symmetric Cryptology","issn_l":"2519-173X","issn":["2519-173X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Symmetric Cryptology","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://tosc.iacr.org/index.php/ToSC/article/download/9975/9473","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5061324009","display_name":"Solane El Hirch","orcid":null},"institutions":[{"id":"https://openalex.org/I145872427","display_name":"Radboud University Nijmegen","ror":"https://ror.org/016xsfp80","country_code":"NL","type":"education","lineage":["https://openalex.org/I145872427"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Solane El Hirch","raw_affiliation_strings":["Radboud University, Nijmegen, The Netherlands"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Radboud University, Nijmegen, The Netherlands","institution_ids":["https://openalex.org/I145872427"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5067049629","display_name":"Silvia Mella","orcid":"https://orcid.org/0000-0002-4664-3541"},"institutions":[{"id":"https://openalex.org/I145872427","display_name":"Radboud University Nijmegen","ror":"https://ror.org/016xsfp80","country_code":"NL","type":"education","lineage":["https://openalex.org/I145872427"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Silvia Mella","raw_affiliation_strings":["Radboud University, Nijmegen, The Netherlands"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Radboud University, Nijmegen, The Netherlands","institution_ids":["https://openalex.org/I145872427"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5027799923","display_name":"Alireza Mehrdad","orcid":"https://orcid.org/0000-0001-6341-7944"},"institutions":[{"id":"https://openalex.org/I145872427","display_name":"Radboud University Nijmegen","ror":"https://ror.org/016xsfp80","country_code":"NL","type":"education","lineage":["https://openalex.org/I145872427"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Alireza Mehrdad","raw_affiliation_strings":["Radboud University, Nijmegen, The Netherlands"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Radboud University, Nijmegen, The Netherlands","institution_ids":["https://openalex.org/I145872427"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5055847285","display_name":"Joan Daemen","orcid":"https://orcid.org/0000-0002-4102-0775"},"institutions":[{"id":"https://openalex.org/I145872427","display_name":"Radboud University Nijmegen","ror":"https://ror.org/016xsfp80","country_code":"NL","type":"education","lineage":["https://openalex.org/I145872427"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Joan Daemen","raw_affiliation_strings":["Radboud University, Nijmegen, The Netherlands"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Radboud University, Nijmegen, The Netherlands","institution_ids":["https://openalex.org/I145872427"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I145872427"],"apc_list":null,"apc_paid":null,"fwci":1.0443,"has_fulltext":true,"cited_by_count":11,"citation_normalized_percentile":{"value":0.80197185,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"145","last_page":"178"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11130","display_name":"Coding theory and cryptography","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11017","display_name":"Chaos-based Image/Signal Encryption","score":0.9951000213623047,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/tree-traversal","display_name":"Tree traversal","score":0.7375701665878296},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6907123327255249},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.6765623092651367},{"id":"https://openalex.org/keywords/cryptographic-primitive","display_name":"Cryptographic primitive","score":0.5813304781913757},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.544416069984436},{"id":"https://openalex.org/keywords/linear-cryptanalysis","display_name":"Linear cryptanalysis","score":0.5386123657226562},{"id":"https://openalex.org/keywords/tree","display_name":"Tree (set theory)","score":0.5059790015220642},{"id":"https://openalex.org/keywords/differential-cryptanalysis","display_name":"Differential cryptanalysis","score":0.488359659910202},{"id":"https://openalex.org/keywords/upper-and-lower-bounds","display_name":"Upper and lower bounds","score":0.4605156183242798},{"id":"https://openalex.org/keywords/differential","display_name":"Differential (mechanical device)","score":0.4557901620864868},{"id":"https://openalex.org/keywords/traverse","display_name":"Traverse","score":0.4520093500614166},{"id":"https://openalex.org/keywords/nist","display_name":"NIST","score":0.4500267803668976},{"id":"https://openalex.org/keywords/hash-function","display_name":"Hash function","score":0.4383552372455597},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.39771178364753723},{"id":"https://openalex.org/keywords/cryptanalysis","display_name":"Cryptanalysis","score":0.3671586215496063},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.2917511761188507},{"id":"https://openalex.org/keywords/cryptographic-protocol","display_name":"Cryptographic protocol","score":0.256122350692749},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.11861371994018555},{"id":"https://openalex.org/keywords/combinatorics","display_name":"Combinatorics","score":0.10992053151130676}],"concepts":[{"id":"https://openalex.org/C140745168","wikidata":"https://www.wikidata.org/wiki/Q1210082","display_name":"Tree traversal","level":2,"score":0.7375701665878296},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6907123327255249},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.6765623092651367},{"id":"https://openalex.org/C15927051","wikidata":"https://www.wikidata.org/wiki/Q246593","display_name":"Cryptographic primitive","level":4,"score":0.5813304781913757},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.544416069984436},{"id":"https://openalex.org/C82424418","wikidata":"https://www.wikidata.org/wiki/Q1826463","display_name":"Linear cryptanalysis","level":4,"score":0.5386123657226562},{"id":"https://openalex.org/C113174947","wikidata":"https://www.wikidata.org/wiki/Q2859736","display_name":"Tree (set theory)","level":2,"score":0.5059790015220642},{"id":"https://openalex.org/C36123800","wikidata":"https://www.wikidata.org/wiki/Q1224471","display_name":"Differential cryptanalysis","level":4,"score":0.488359659910202},{"id":"https://openalex.org/C77553402","wikidata":"https://www.wikidata.org/wiki/Q13222579","display_name":"Upper and lower bounds","level":2,"score":0.4605156183242798},{"id":"https://openalex.org/C93226319","wikidata":"https://www.wikidata.org/wiki/Q193137","display_name":"Differential (mechanical device)","level":2,"score":0.4557901620864868},{"id":"https://openalex.org/C176809094","wikidata":"https://www.wikidata.org/wiki/Q15401496","display_name":"Traverse","level":2,"score":0.4520093500614166},{"id":"https://openalex.org/C111219384","wikidata":"https://www.wikidata.org/wiki/Q6954384","display_name":"NIST","level":2,"score":0.4500267803668976},{"id":"https://openalex.org/C99138194","wikidata":"https://www.wikidata.org/wiki/Q183427","display_name":"Hash function","level":2,"score":0.4383552372455597},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.39771178364753723},{"id":"https://openalex.org/C181149355","wikidata":"https://www.wikidata.org/wiki/Q897511","display_name":"Cryptanalysis","level":3,"score":0.3671586215496063},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.2917511761188507},{"id":"https://openalex.org/C33884865","wikidata":"https://www.wikidata.org/wiki/Q1254335","display_name":"Cryptographic protocol","level":3,"score":0.256122350692749},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.11861371994018555},{"id":"https://openalex.org/C114614502","wikidata":"https://www.wikidata.org/wiki/Q76592","display_name":"Combinatorics","level":1,"score":0.10992053151130676},{"id":"https://openalex.org/C205649164","wikidata":"https://www.wikidata.org/wiki/Q1071","display_name":"Geography","level":0,"score":0.0},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C13280743","wikidata":"https://www.wikidata.org/wiki/Q131089","display_name":"Geodesy","level":1,"score":0.0},{"id":"https://openalex.org/C146978453","wikidata":"https://www.wikidata.org/wiki/Q3798668","display_name":"Aerospace engineering","level":1,"score":0.0},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.0}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.46586/tosc.v2022.i4.145-178","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tosc.v2022.i4.145-178","pdf_url":"https://tosc.iacr.org/index.php/ToSC/article/download/9975/9473","source":{"id":"https://openalex.org/S4210236173","display_name":"IACR Transactions on Symmetric Cryptology","issn_l":"2519-173X","issn":["2519-173X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Symmetric Cryptology","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:8cafa693bb2f4cfbb01804b20cfe1937","is_oa":true,"landing_page_url":"https://doaj.org/article/8cafa693bb2f4cfbb01804b20cfe1937","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IACR Transactions on Symmetric Cryptology, Vol 2022, Iss 4 (2022)","raw_type":"article"},{"id":"pmh:oai:repository.ubn.ru.nl:2066/286469","is_oa":false,"landing_page_url":"https://hdl.handle.net/2066/286469","pdf_url":null,"source":{"id":"https://openalex.org/S4306401067","display_name":"Radboud Repository (Radboud University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I145872427","host_organization_name":"Radboud University Nijmegen","host_organization_lineage":["https://openalex.org/I145872427"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Article / Letter to editor"},{"id":"pmh:ru:oai:repository.ubn.ru.nl:2066/286469","is_oa":true,"landing_page_url":"http://hdl.handle.net/2066/286469","pdf_url":null,"source":{"id":"https://openalex.org/S4306401843","display_name":"Data Archiving and Networked Services (DANS)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1322597698","host_organization_name":"Royal Netherlands Academy of Arts and Sciences","host_organization_lineage":["https://openalex.org/I1322597698"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IACR Transactions on Symmetric Cryptology, 2022, 145 - 178","raw_type":"info:eu-repo/semantics/article"}],"best_oa_location":{"id":"doi:10.46586/tosc.v2022.i4.145-178","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tosc.v2022.i4.145-178","pdf_url":"https://tosc.iacr.org/index.php/ToSC/article/download/9975/9473","source":{"id":"https://openalex.org/S4210236173","display_name":"IACR Transactions on Symmetric Cryptology","issn_l":"2519-173X","issn":["2519-173X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Symmetric Cryptology","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4311870646.pdf","grobid_xml":"https://content.openalex.org/works/W4311870646.grobid-xml"},"referenced_works_count":19,"referenced_works":["https://openalex.org/W156355313","https://openalex.org/W197228877","https://openalex.org/W1503638523","https://openalex.org/W1553650484","https://openalex.org/W2238818043","https://openalex.org/W2504919933","https://openalex.org/W2599205485","https://openalex.org/W2757403014","https://openalex.org/W3045281960","https://openalex.org/W3088704016","https://openalex.org/W3146780285","https://openalex.org/W3200082646","https://openalex.org/W3210705930","https://openalex.org/W4205771478","https://openalex.org/W4220816303","https://openalex.org/W4232988949","https://openalex.org/W4240574532","https://openalex.org/W4308288844","https://openalex.org/W4389648618"],"related_works":["https://openalex.org/W1907974733","https://openalex.org/W2786560893","https://openalex.org/W1846045953","https://openalex.org/W1849484603","https://openalex.org/W321472610","https://openalex.org/W2541280449","https://openalex.org/W4378376555","https://openalex.org/W2390821355","https://openalex.org/W2086160109","https://openalex.org/W1601440354"],"abstract_inverted_index":{"Ascon":[0,33],"is":[1,16,80,106],"a":[2,81,169,182,193,239],"family":[3,51],"of":[4,20,41,49,52,69,77,88,195,228,265,287],"cryptographic":[5,53,89],"primitives":[6,54,98],"for":[7,65,73,96,113,172,245,250,262,269,278,284],"authenticated":[8],"encryption":[9],"and":[10,38,60,72,115,131,139,155,184,249,253,281,290],"hashing":[11],"introduced":[12],"in":[13,24,175,181,188],"2015.":[14],"It":[15,91],"selected":[17],"as":[18,137],"one":[19],"the":[21,25,39,46,66,74,86,212,232,258,270],"ten":[22],"finalists":[23],"NIST":[26],"Lightweight":[27],"Cryptography":[28],"competition.":[29],"Since":[30],"its":[31],"introduction,":[32],"has":[34],"been":[35],"extensively":[36],"cryptanalyzed,":[37],"results":[40],"these":[42,146,203],"analyses":[43],"can":[44,92,120],"indicate":[45],"good":[47],"resistance":[48],"this":[50,165,186],"against":[55],"known":[56],"attacks,":[57],"like":[58,99],"differential":[59,67,70,114,252,289],"linear":[61,78,116,247,254,291],"cryptanalysis.Proving":[62],"upper":[63,111,260],"bounds":[64,112,160,244,261,275],"probability":[68],"trails":[71,79,180,204,229],"squared":[75],"correlation":[76],"standard":[82],"requirement":[83],"to":[84,108,144,151,162,205,216,223],"evaluate":[85],"security":[87],"primitives.":[90],"be":[93,121],"done":[94],"analytically":[95],"some":[97],"AES.":[100],"For":[101],"other":[102,263],"primitives,":[103],"computer":[104],"assistance":[105],"required":[107],"prove":[109,145,242,274],"strong":[110],"trails.":[117,292],"Computer-aided":[118],"tools":[119,126],"classified":[122],"into":[123],"two":[124],"categories:":[125],"based":[127],"on":[128],"general-purpose":[129,236],"solvers":[130,135],"dedicated":[132,163,170],"tools.":[133],"General-purpose":[134],"such":[136],"SAT":[138],"MILP":[140],"are":[141],"widely":[142],"used":[143],"bounds,":[147],"however":[148],"they":[149],"seem":[150],"have":[152],"lower":[153],"capabilities":[154],"thus":[156],"yield":[157],"less":[158],"powerful":[159],"compared":[161],"tools.In":[164],"work,":[166],"we":[167,198,201,209,241,256,273],"present":[168],"tool":[171],"trail":[173],"search":[174],"Ascon.":[176],"We":[177],"arrange":[178],"2-round":[179],"tree":[183,187,213],"traverse":[185],"an":[189],"efficient":[190],"way":[191],"using":[192,235],"number":[194,264],"new":[196],"techniques":[197],"introduce.":[199],"Then":[200],"extend":[202],"more":[206],"rounds,":[207],"where":[208],"also":[210],"use":[211],"traversal":[214],"technique":[215],"do":[217],"it":[218],"efficiently.":[219],"This":[220],"allows":[221],"us":[222],"scan":[224],"much":[225],"larger":[226],"spaces":[227],"faster":[230],"than":[231],"previous":[233],"methods":[234],"solvers.":[237],"As":[238],"result,":[240],"tight":[243],"3-rounds":[246],"trails,":[248,255],"both":[251,288],"improve":[257],"existing":[259],"rounds.":[266],"In":[267],"particular,":[268],"first":[271],"time,":[272],"beyond":[276,282],"2\u2212128":[277],"6":[279],"rounds":[280,286],"2\u2212256":[283],"12":[285]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":4},{"year":2022,"cited_by_count":1}],"updated_date":"2026-07-25T15:57:00.446498","created_date":"2023-01-01T00:00:00"}