{"id":"https://openalex.org/W4389648618","doi":"https://doi.org/10.46586/tosc.v2023.i4.187-214","title":"Tighter Trail Bounds for Xoodoo","display_name":"Tighter Trail Bounds for Xoodoo","publication_year":2023,"publication_date":"2023-12-08","ids":{"openalex":"https://openalex.org/W4389648618","doi":"https://doi.org/10.46586/tosc.v2023.i4.187-214"},"language":"en","primary_location":{"id":"doi:10.46586/tosc.v2023.i4.187-214","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tosc.v2023.i4.187-214","pdf_url":"https://tosc.iacr.org/index.php/ToSC/article/download/11285/10817","source":{"id":"https://openalex.org/S4210236173","display_name":"IACR Transactions on Symmetric Cryptology","issn_l":"2519-173X","issn":["2519-173X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Symmetric Cryptology","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://tosc.iacr.org/index.php/ToSC/article/download/11285/10817","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5067049629","display_name":"Silvia Mella","orcid":"https://orcid.org/0000-0002-4664-3541"},"institutions":[{"id":"https://openalex.org/I145872427","display_name":"Radboud University Nijmegen","ror":"https://ror.org/016xsfp80","country_code":"NL","type":"education","lineage":["https://openalex.org/I145872427"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Silvia Mella","raw_affiliation_strings":["Radboud University, Nijmegen, The Netherlands"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Radboud University, Nijmegen, The Netherlands","institution_ids":["https://openalex.org/I145872427"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5055847285","display_name":"Joan Daemen","orcid":"https://orcid.org/0000-0002-4102-0775"},"institutions":[{"id":"https://openalex.org/I145872427","display_name":"Radboud University Nijmegen","ror":"https://ror.org/016xsfp80","country_code":"NL","type":"education","lineage":["https://openalex.org/I145872427"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Joan Daemen","raw_affiliation_strings":["Radboud University, Nijmegen, The Netherlands"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Radboud University, Nijmegen, The Netherlands","institution_ids":["https://openalex.org/I145872427"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5113873259","display_name":"Gilles Van Assche","orcid":"https://orcid.org/0000-0001-5003-8937"},"institutions":[{"id":"https://openalex.org/I4210117275","display_name":"STMicroelectronics (Belgium)","ror":"https://ror.org/02km85a12","country_code":"BE","type":"company","lineage":["https://openalex.org/I131827901","https://openalex.org/I4210117275"]}],"countries":["BE"],"is_corresponding":false,"raw_author_name":"Gilles Van Assche","raw_affiliation_strings":["STMicroelectronics, Diegem, Belgium"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"STMicroelectronics, Diegem, Belgium","institution_ids":["https://openalex.org/I4210117275"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.2067,"has_fulltext":true,"cited_by_count":4,"citation_normalized_percentile":{"value":0.76240876,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":"2023","issue":"4","first_page":"187","last_page":"214"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10948","display_name":"Advanced Combinatorial Mathematics","score":0.19380000233650208,"subfield":{"id":"https://openalex.org/subfields/2607","display_name":"Discrete Mathematics and Combinatorics"},"field":{"id":"https://openalex.org/fields/26","display_name":"Mathematics"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10948","display_name":"Advanced Combinatorial Mathematics","score":0.19380000233650208,"subfield":{"id":"https://openalex.org/subfields/2607","display_name":"Discrete Mathematics and Combinatorics"},"field":{"id":"https://openalex.org/fields/26","display_name":"Mathematics"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.11190000176429749,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10720","display_name":"Complexity and Algorithms in Graphs","score":0.06419999897480011,"subfield":{"id":"https://openalex.org/subfields/1703","display_name":"Computational Theory and Mathematics"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.6270273923873901},{"id":"https://openalex.org/keywords/extension","display_name":"Extension (predicate logic)","score":0.6243458986282349},{"id":"https://openalex.org/keywords/upper-and-lower-bounds","display_name":"Upper and lower bounds","score":0.5544282793998718},{"id":"https://openalex.org/keywords/permutation","display_name":"Permutation (music)","score":0.5478678345680237},{"id":"https://openalex.org/keywords/combinatorics","display_name":"Combinatorics","score":0.5186516642570496},{"id":"https://openalex.org/keywords/differential","display_name":"Differential (mechanical device)","score":0.47971242666244507},{"id":"https://openalex.org/keywords/minimum-weight","display_name":"Minimum weight","score":0.4468829333782196},{"id":"https://openalex.org/keywords/bottleneck","display_name":"Bottleneck","score":0.4419935941696167},{"id":"https://openalex.org/keywords/discrete-mathematics","display_name":"Discrete mathematics","score":0.43848368525505066},{"id":"https://openalex.org/keywords/random-permutation","display_name":"Random permutation","score":0.42874276638031006},{"id":"https://openalex.org/keywords/limit","display_name":"Limit (mathematics)","score":0.42844098806381226},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.3835200071334839},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.36196714639663696},{"id":"https://openalex.org/keywords/block","display_name":"Block (permutation group theory)","score":0.12244796752929688}],"concepts":[{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.6270273923873901},{"id":"https://openalex.org/C2778029271","wikidata":"https://www.wikidata.org/wiki/Q5421931","display_name":"Extension (predicate logic)","level":2,"score":0.6243458986282349},{"id":"https://openalex.org/C77553402","wikidata":"https://www.wikidata.org/wiki/Q13222579","display_name":"Upper and lower bounds","level":2,"score":0.5544282793998718},{"id":"https://openalex.org/C21308566","wikidata":"https://www.wikidata.org/wiki/Q7169365","display_name":"Permutation (music)","level":2,"score":0.5478678345680237},{"id":"https://openalex.org/C114614502","wikidata":"https://www.wikidata.org/wiki/Q76592","display_name":"Combinatorics","level":1,"score":0.5186516642570496},{"id":"https://openalex.org/C93226319","wikidata":"https://www.wikidata.org/wiki/Q193137","display_name":"Differential (mechanical device)","level":2,"score":0.47971242666244507},{"id":"https://openalex.org/C2778945305","wikidata":"https://www.wikidata.org/wiki/Q6865502","display_name":"Minimum weight","level":2,"score":0.4468829333782196},{"id":"https://openalex.org/C2780513914","wikidata":"https://www.wikidata.org/wiki/Q18210350","display_name":"Bottleneck","level":2,"score":0.4419935941696167},{"id":"https://openalex.org/C118615104","wikidata":"https://www.wikidata.org/wiki/Q121416","display_name":"Discrete mathematics","level":1,"score":0.43848368525505066},{"id":"https://openalex.org/C200985842","wikidata":"https://www.wikidata.org/wiki/Q3375503","display_name":"Random permutation","level":3,"score":0.42874276638031006},{"id":"https://openalex.org/C151201525","wikidata":"https://www.wikidata.org/wiki/Q177239","display_name":"Limit (mathematics)","level":2,"score":0.42844098806381226},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.3835200071334839},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.36196714639663696},{"id":"https://openalex.org/C2777210771","wikidata":"https://www.wikidata.org/wiki/Q4927124","display_name":"Block (permutation group theory)","level":2,"score":0.12244796752929688},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C24890656","wikidata":"https://www.wikidata.org/wiki/Q82811","display_name":"Acoustics","level":1,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.0},{"id":"https://openalex.org/C146978453","wikidata":"https://www.wikidata.org/wiki/Q3798668","display_name":"Aerospace engineering","level":1,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.46586/tosc.v2023.i4.187-214","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tosc.v2023.i4.187-214","pdf_url":"https://tosc.iacr.org/index.php/ToSC/article/download/11285/10817","source":{"id":"https://openalex.org/S4210236173","display_name":"IACR Transactions on Symmetric Cryptology","issn_l":"2519-173X","issn":["2519-173X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Symmetric Cryptology","raw_type":"journal-article"},{"id":"pmh:oai:repository.ubn.ru.nl:2066/300278","is_oa":true,"landing_page_url":"https://hdl.handle.net/2066/300278","pdf_url":"https://repository.ubn.ru.nl/bitstream/handle/2066/300278/1/300278.pdf","source":{"id":"https://openalex.org/S4306401067","display_name":"Radboud Repository (Radboud University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I145872427","host_organization_name":"Radboud University Nijmegen","host_organization_lineage":["https://openalex.org/I145872427"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Article / Letter to editor"},{"id":"pmh:oai:doaj.org/article:ef42847eb24b4b67a0a8344310c4f510","is_oa":true,"landing_page_url":"https://doaj.org/article/ef42847eb24b4b67a0a8344310c4f510","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IACR Transactions on Symmetric Cryptology, Vol 2023, Iss 4 (2023)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.46586/tosc.v2023.i4.187-214","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tosc.v2023.i4.187-214","pdf_url":"https://tosc.iacr.org/index.php/ToSC/article/download/11285/10817","source":{"id":"https://openalex.org/S4210236173","display_name":"IACR Transactions on Symmetric Cryptology","issn_l":"2519-173X","issn":["2519-173X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Symmetric Cryptology","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1219913396","display_name":null,"funder_award_id":"ERC-2017","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"},{"id":"https://openalex.org/G1255872072","display_name":null,"funder_award_id":"788980","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"},{"id":"https://openalex.org/G5188059367","display_name":"PROACT - Physical Attack Resistance of Cryptographic Algorithms and Circuits with Reduced Time to Market","funder_award_id":"NWA.1215.18.014","funder_id":"https://openalex.org/F4320321800","funder_display_name":"Nederlandse Organisatie voor Wetenschappelijk Onderzoek"}],"funders":[{"id":"https://openalex.org/F4320320300","display_name":"European Commission","ror":"https://ror.org/00k4n6c32"},{"id":"https://openalex.org/F4320321800","display_name":"Nederlandse Organisatie voor Wetenschappelijk Onderzoek","ror":"https://ror.org/04jsz6e67"}],"has_content":{"grobid_xml":false,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4389648618.pdf"},"referenced_works_count":13,"referenced_works":["https://openalex.org/W156355313","https://openalex.org/W2599205485","https://openalex.org/W2794798192","https://openalex.org/W4232988949","https://openalex.org/W4240505175","https://openalex.org/W4240574532","https://openalex.org/W4308288844","https://openalex.org/W4311870646","https://openalex.org/W4385654154","https://openalex.org/W4389648618","https://openalex.org/W4392148977","https://openalex.org/W6758919096","https://openalex.org/W6780768663"],"related_works":["https://openalex.org/W2184131469","https://openalex.org/W4321748008","https://openalex.org/W2797610470","https://openalex.org/W2074196947","https://openalex.org/W1887300513","https://openalex.org/W4312051210","https://openalex.org/W4297729179","https://openalex.org/W2120153268","https://openalex.org/W102744014","https://openalex.org/W1985197322"],"abstract_inverted_index":{"Determining":[0],"bounds":[1,31,88,137,204],"on":[2],"the":[3,10,22,35,48,67,87,95,110,136,143,152,164,206],"differential":[4,7,177],"probability":[5],"of":[6,14,21,25,50,69,82,120,146,155,167,187,209,214],"trails":[8,16,53,102,188,210],"and":[9,71,131,163,178,198],"squared":[11],"correlation":[12],"contribution":[13],"linear":[15,179],"forms":[17],"an":[18],"important":[19],"part":[20],"security":[23],"evaluation":[24],"a":[26,42,57,89,118,182],"permutation.":[27],"For":[28],"Xoodoo,":[29],"such":[30,133],"were":[32],"proven":[33],"using":[34],"trail":[36,98,149,158,170],"core":[37],"tree":[38],"search":[39,62],"technique,":[40],"with":[41,54,66],"dedicated":[43],"tool":[44],"(XooTools)":[45],"that":[46,122,142,189],"scans":[47],"space":[49,63],"all":[51],"r-round":[52],"weight":[55,145,154,166,192,208],"below":[56],"given":[58],"threshold":[59],"Tr.":[60],"The":[61,92],"grows":[64],"exponentially":[65],"value":[68],"Tr":[70],"XooTools":[72],"appeared":[73],"to":[74,85,105,125,134,195,201],"have":[75,190],"reached":[76],"its":[77],"limit,":[78],"requiring":[79],"huge":[80],"amounts":[81],"CPU":[83],"time":[84],"push":[86],"little":[90],"further.":[91],"bottleneck":[93],"was":[94],"phase":[96],"called":[97],"extension":[99,127],"where":[100],"short":[101],"are":[103],"extended":[104,194],"more":[106,129,196],"rounds,":[107],"especially":[108],"in":[109],"backward":[111],"direction.":[112],"In":[113],"this":[114],"work,":[115],"we":[116,140,184],"present":[117],"number":[119],"techniques":[121],"allowed":[123],"us":[124],"make":[126],"much":[128],"efficient":[130],"as":[132],"increase":[135],"significantly.":[138],"Notably,":[139],"prove":[141],"minimum":[144,153,165,207],"any":[147,156,168],"4-round":[148],"is":[150,159,171],"80,":[151],"6-round":[157],"at":[160,172],"least":[161,173],"132":[162],"12-round":[169],"264,":[174],"both":[175],"for":[176,205,211],"trails.":[180],"As":[181],"byproduct":[183],"found":[185],"families":[186],"predictable":[191],"once":[193],"rounds":[197],"use":[199],"them":[200],"compute":[202],"upper":[203],"arbitrary":[212],"numbers":[213],"rounds.":[215]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":2}],"updated_date":"2026-07-15T18:14:33.161393","created_date":"2025-10-10T00:00:00"}