{"id":"https://openalex.org/W4405541630","doi":"https://doi.org/10.46586/tosc.v2024.i4.138-190","title":"Exploring the Six Worlds of Gr\u00f6bner Basis Cryptanalysis: Application to Anemoi","display_name":"Exploring the Six Worlds of Gr\u00f6bner Basis Cryptanalysis: Application to Anemoi","publication_year":2024,"publication_date":"2024-12-18","ids":{"openalex":"https://openalex.org/W4405541630","doi":"https://doi.org/10.46586/tosc.v2024.i4.138-190"},"language":"en","primary_location":{"id":"doi:10.46586/tosc.v2024.i4.138-190","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tosc.v2024.i4.138-190","pdf_url":"https://tosc.iacr.org/index.php/ToSC/article/download/11953/11820","source":{"id":"https://openalex.org/S4210236173","display_name":"IACR Transactions on Symmetric Cryptology","issn_l":"2519-173X","issn":["2519-173X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Symmetric Cryptology","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://tosc.iacr.org/index.php/ToSC/article/download/11953/11820","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5115532604","display_name":"Katharina Koschatko","orcid":"https://orcid.org/0009-0003-3109-146X"},"institutions":[{"id":"https://openalex.org/I4092182","display_name":"Graz University of Technology","ror":"https://ror.org/00d7xrm67","country_code":"AT","type":"education","lineage":["https://openalex.org/I4092182"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Katharina Koschatko","raw_affiliation_strings":["Graz University of Technology, Graz, Austria"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Graz University of Technology, Graz, Austria","institution_ids":["https://openalex.org/I4092182"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5046739461","display_name":"Reinhard L\u00fcftenegger","orcid":null},"institutions":[{"id":"https://openalex.org/I4092182","display_name":"Graz University of Technology","ror":"https://ror.org/00d7xrm67","country_code":"AT","type":"education","lineage":["https://openalex.org/I4092182"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Reinhard L\u00fcftenegger","raw_affiliation_strings":["Graz University of Technology, Graz, Austria"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Graz University of Technology, Graz, Austria","institution_ids":["https://openalex.org/I4092182"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5068575128","display_name":"Christian Rechberger","orcid":"https://orcid.org/0000-0003-1280-6020"},"institutions":[{"id":"https://openalex.org/I4092182","display_name":"Graz University of Technology","ror":"https://ror.org/00d7xrm67","country_code":"AT","type":"education","lineage":["https://openalex.org/I4092182"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Christian Rechberger","raw_affiliation_strings":["Graz University of Technology, Graz, Austria"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Graz University of Technology, Graz, Austria","institution_ids":["https://openalex.org/I4092182"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I4092182"],"apc_list":null,"apc_paid":null,"fwci":1.4411,"has_fulltext":true,"cited_by_count":5,"citation_normalized_percentile":{"value":0.84463982,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":97},"biblio":{"volume":"2024","issue":"4","first_page":"138","last_page":"190"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11435","display_name":"Polynomial and algebraic computation","score":0.8543000221252441,"subfield":{"id":"https://openalex.org/subfields/1703","display_name":"Computational Theory and Mathematics"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11435","display_name":"Polynomial and algebraic computation","score":0.8543000221252441,"subfield":{"id":"https://openalex.org/subfields/1703","display_name":"Computational Theory and Mathematics"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11693","display_name":"Cryptography and Residue Arithmetic","score":0.753000020980835,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13523","display_name":"Mathematics, Computing, and Information Processing","score":0.7419999837875366,"subfield":{"id":"https://openalex.org/subfields/1703","display_name":"Computational Theory and Mathematics"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/cryptanalysis","display_name":"Cryptanalysis","score":0.5673865675926208},{"id":"https://openalex.org/keywords/basis","display_name":"Basis (linear algebra)","score":0.5453495383262634},{"id":"https://openalex.org/keywords/linear-cryptanalysis","display_name":"Linear cryptanalysis","score":0.41471320390701294},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.38057661056518555},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.36944103240966797},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.20508748292922974},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.19691845774650574},{"id":"https://openalex.org/keywords/geometry","display_name":"Geometry","score":0.0943809449672699}],"concepts":[{"id":"https://openalex.org/C181149355","wikidata":"https://www.wikidata.org/wiki/Q897511","display_name":"Cryptanalysis","level":3,"score":0.5673865675926208},{"id":"https://openalex.org/C12426560","wikidata":"https://www.wikidata.org/wiki/Q189569","display_name":"Basis (linear algebra)","level":2,"score":0.5453495383262634},{"id":"https://openalex.org/C82424418","wikidata":"https://www.wikidata.org/wiki/Q1826463","display_name":"Linear cryptanalysis","level":4,"score":0.41471320390701294},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.38057661056518555},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.36944103240966797},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.20508748292922974},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.19691845774650574},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0943809449672699}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.46586/tosc.v2024.i4.138-190","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tosc.v2024.i4.138-190","pdf_url":"https://tosc.iacr.org/index.php/ToSC/article/download/11953/11820","source":{"id":"https://openalex.org/S4210236173","display_name":"IACR Transactions on Symmetric Cryptology","issn_l":"2519-173X","issn":["2519-173X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Symmetric Cryptology","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:c04601b09d4b4b77a79833dfe0d2239d","is_oa":false,"landing_page_url":"https://doaj.org/article/c04601b09d4b4b77a79833dfe0d2239d","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IACR Transactions on Symmetric Cryptology, Vol 2024, Iss 4 (2024)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.46586/tosc.v2024.i4.138-190","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tosc.v2024.i4.138-190","pdf_url":"https://tosc.iacr.org/index.php/ToSC/article/download/11953/11820","source":{"id":"https://openalex.org/S4210236173","display_name":"IACR Transactions on Symmetric Cryptology","issn_l":"2519-173X","issn":["2519-173X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Symmetric Cryptology","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.49000000953674316}],"awards":[{"id":"https://openalex.org/G5881503230","display_name":"Confidential Computing and Privacy-preserving Technologies for 6G","funder_award_id":"101096435","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"}],"funders":[{"id":"https://openalex.org/F4320320300","display_name":"European Commission","ror":"https://ror.org/00k4n6c32"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4405541630.pdf","grobid_xml":"https://content.openalex.org/works/W4405541630.grobid-xml"},"referenced_works_count":52,"referenced_works":["https://openalex.org/W156757921","https://openalex.org/W632399495","https://openalex.org/W1493026726","https://openalex.org/W1520260307","https://openalex.org/W1524190946","https://openalex.org/W1525447969","https://openalex.org/W1534885379","https://openalex.org/W1542020576","https://openalex.org/W1559266576","https://openalex.org/W1598156343","https://openalex.org/W1644572710","https://openalex.org/W1979366382","https://openalex.org/W1979462002","https://openalex.org/W1988839605","https://openalex.org/W2003767038","https://openalex.org/W2005936052","https://openalex.org/W2043779445","https://openalex.org/W2059522106","https://openalex.org/W2061871339","https://openalex.org/W2128687423","https://openalex.org/W2166998199","https://openalex.org/W2207819601","https://openalex.org/W2552640487","https://openalex.org/W2963833429","https://openalex.org/W2970358075","https://openalex.org/W2972668960","https://openalex.org/W3009904134","https://openalex.org/W3082761440","https://openalex.org/W3089783068","https://openalex.org/W3091014139","https://openalex.org/W3091883733","https://openalex.org/W3133710726","https://openalex.org/W3173254480","https://openalex.org/W4205171121","https://openalex.org/W4220813368","https://openalex.org/W4231623775","https://openalex.org/W4240837394","https://openalex.org/W4283813321","https://openalex.org/W4285241375","https://openalex.org/W4298289021","https://openalex.org/W4300819719","https://openalex.org/W4307649440","https://openalex.org/W4308361277","https://openalex.org/W4323697367","https://openalex.org/W4365807722","https://openalex.org/W4385654519","https://openalex.org/W4385654699","https://openalex.org/W4392386928","https://openalex.org/W4400650334","https://openalex.org/W4401647543","https://openalex.org/W4405144445","https://openalex.org/W6941025832"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W1907974733","https://openalex.org/W2802560047","https://openalex.org/W2026284256","https://openalex.org/W2093538406","https://openalex.org/W2102023965","https://openalex.org/W1920313804","https://openalex.org/W2397489728","https://openalex.org/W2786560893","https://openalex.org/W1996683293"],"abstract_inverted_index":{"Gr\u00f6bner":[0,54,75],"basis":[1,55,76],"cryptanalysis":[2],"of":[3,30,74,86,96],"hash":[4,22],"functions":[5],"and":[6,8],"ciphers,":[7],"their":[9],"underlying":[10],"permutations,":[11],"has":[12],"seen":[13],"renewed":[14],"interest":[15],"recently.":[16],"Anemoi":[17,59],"(Crypto\u201923)":[18],"is":[19,25],"a":[20,28,114],"permutation-based":[21],"function":[23],"that":[24,91],"efficient":[26],"for":[27,53,104],"variety":[29],"arithmetizations":[31],"used":[32,103],"in":[33,67],"zero-knowledge":[34],"proofs.":[35],"In":[36],"this":[37],"paper,":[38],"exploring":[39],"both":[40],"theoretical":[41],"bounds":[42],"as":[43,45],"well":[44],"experimental":[46],"validation,":[47],"we":[48,69,89],"present":[49],"new":[50],"complexity":[51],"estimates":[52],"attacks":[56],"on":[57],"the":[58,71,82,87],"permutation":[60],"over":[61],"prime":[62],"fields.We":[63],"cast":[64],"our":[65,108],"findings":[66],"what":[68],"call":[70],"six":[72],"worlds":[73],"cryptanalysis.":[77],"As":[78],"an":[79],"example,":[80],"keeping":[81],"same":[83],"security":[84,115],"arguments":[85],"design,":[88],"conclude":[90],"at":[92],"least":[93],"41":[94],"instead":[95],"37":[97],"rounds":[98],"would":[99],"need":[100],"to":[101],"be":[102],"256-bit":[105],"security,":[106],"whereby":[107],"suggestion":[109],"does":[110],"not":[111],"yet":[112],"include":[113],"margin.":[116]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":3},{"year":2024,"cited_by_count":1}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-10-10T00:00:00"}