{"id":"https://openalex.org/W4414527709","doi":"https://doi.org/10.46586/tosc.v2025.i3.368-399","title":"Multidimensional Linear Cryptanalysis of AEGIS","display_name":"Multidimensional Linear Cryptanalysis of AEGIS","publication_year":2025,"publication_date":"2025-09-25","ids":{"openalex":"https://openalex.org/W4414527709","doi":"https://doi.org/10.46586/tosc.v2025.i3.368-399"},"language":"en","primary_location":{"id":"doi:10.46586/tosc.v2025.i3.368-399","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tosc.v2025.i3.368-399","pdf_url":"https://tosc.iacr.org/index.php/ToSC/article/download/12474/12188","source":{"id":"https://openalex.org/S4210236173","display_name":"IACR Transactions on Symmetric Cryptology","issn_l":"2519-173X","issn":["2519-173X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Symmetric Cryptology","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://tosc.iacr.org/index.php/ToSC/article/download/12474/12188","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5099245502","display_name":"Yinuo Liu","orcid":null},"institutions":[{"id":"https://openalex.org/I169689159","display_name":"PLA Information Engineering University","ror":"https://ror.org/00mm1qk40","country_code":"CN","type":"education","lineage":["https://openalex.org/I169689159"]},{"id":"https://openalex.org/I4210132990","display_name":"State Key Laboratory of Cryptology","ror":"https://ror.org/02pn5rj08","country_code":"CN","type":"government","lineage":["https://openalex.org/I4210132990"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yinuo Liu","raw_affiliation_strings":["Information Engineering University, Zhengzhou, China; State Key Laboratory of Cryptology, P.O. Box 5159, Beijing 100878, China","Information Engineering University, Zhengzhou, China","State Key Laboratory of Cryptology, P.O. Box 5159, Beijing 100878, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Information Engineering University, Zhengzhou, China; State Key Laboratory of Cryptology, P.O. Box 5159, Beijing 100878, China","institution_ids":["https://openalex.org/I4210132990"]},{"raw_affiliation_string":"Information Engineering University, Zhengzhou, China","institution_ids":["https://openalex.org/I169689159"]},{"raw_affiliation_string":"State Key Laboratory of Cryptology, P.O. Box 5159, Beijing 100878, China","institution_ids":["https://openalex.org/I4210132990"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100419125","display_name":"Tian Tian","orcid":"https://orcid.org/0000-0002-6044-9083"},"institutions":[{"id":"https://openalex.org/I169689159","display_name":"PLA Information Engineering University","ror":"https://ror.org/00mm1qk40","country_code":"CN","type":"education","lineage":["https://openalex.org/I169689159"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Tian Tian","raw_affiliation_strings":["Information Engineering University, Zhengzhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Information Engineering University, Zhengzhou, China","institution_ids":["https://openalex.org/I169689159"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5082674796","display_name":"Jing Yang","orcid":"https://orcid.org/0000-0003-4639-6592"},"institutions":[{"id":"https://openalex.org/I169689159","display_name":"PLA Information Engineering University","ror":"https://ror.org/00mm1qk40","country_code":"CN","type":"education","lineage":["https://openalex.org/I169689159"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jing Yang","raw_affiliation_strings":["Information Engineering University, Zhengzhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Information Engineering University, Zhengzhou, China","institution_ids":["https://openalex.org/I169689159"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.22792676,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"2025","issue":"3","first_page":"368","last_page":"399"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11017","display_name":"Chaos-based Image/Signal Encryption","score":0.9940000176429749,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11017","display_name":"Chaos-based Image/Signal Encryption","score":0.9940000176429749,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9894999861717224,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11130","display_name":"Coding theory and cryptography","score":0.9782000184059143,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/linear-cryptanalysis","display_name":"Linear cryptanalysis","score":0.7602999806404114},{"id":"https://openalex.org/keywords/keystream","display_name":"Keystream","score":0.7063999772071838},{"id":"https://openalex.org/keywords/correlation-attack","display_name":"Correlation attack","score":0.6958000063896179},{"id":"https://openalex.org/keywords/cryptanalysis","display_name":"Cryptanalysis","score":0.5978999733924866},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.5583000183105469},{"id":"https://openalex.org/keywords/block-cipher","display_name":"Block cipher","score":0.5273000001907349},{"id":"https://openalex.org/keywords/cipher","display_name":"Cipher","score":0.49149999022483826},{"id":"https://openalex.org/keywords/impossible-differential-cryptanalysis","display_name":"Impossible differential cryptanalysis","score":0.47920000553131104}],"concepts":[{"id":"https://openalex.org/C82424418","wikidata":"https://www.wikidata.org/wiki/Q1826463","display_name":"Linear cryptanalysis","level":4,"score":0.7602999806404114},{"id":"https://openalex.org/C2776132008","wikidata":"https://www.wikidata.org/wiki/Q1509893","display_name":"Keystream","level":4,"score":0.7063999772071838},{"id":"https://openalex.org/C120226833","wikidata":"https://www.wikidata.org/wiki/Q5172844","display_name":"Correlation attack","level":4,"score":0.6958000063896179},{"id":"https://openalex.org/C181149355","wikidata":"https://www.wikidata.org/wiki/Q897511","display_name":"Cryptanalysis","level":3,"score":0.5978999733924866},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.578000009059906},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.5583000183105469},{"id":"https://openalex.org/C106544461","wikidata":"https://www.wikidata.org/wiki/Q543151","display_name":"Block cipher","level":3,"score":0.5273000001907349},{"id":"https://openalex.org/C2780221543","wikidata":"https://www.wikidata.org/wiki/Q4681865","display_name":"Cipher","level":3,"score":0.49149999022483826},{"id":"https://openalex.org/C120488936","wikidata":"https://www.wikidata.org/wiki/Q3005748","display_name":"Impossible differential cryptanalysis","level":5,"score":0.47920000553131104},{"id":"https://openalex.org/C43364308","wikidata":"https://www.wikidata.org/wiki/Q8799","display_name":"Byte","level":2,"score":0.47380000352859497},{"id":"https://openalex.org/C36123800","wikidata":"https://www.wikidata.org/wiki/Q1224471","display_name":"Differential cryptanalysis","level":4,"score":0.4652000069618225},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.46380001306533813},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.4551999866962433},{"id":"https://openalex.org/C92950451","wikidata":"https://www.wikidata.org/wiki/Q864718","display_name":"Stream cipher","level":3,"score":0.45500001311302185},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.42910000681877136},{"id":"https://openalex.org/C147552392","wikidata":"https://www.wikidata.org/wiki/Q2869899","display_name":"Boomerang attack","level":5,"score":0.39320001006126404},{"id":"https://openalex.org/C109154458","wikidata":"https://www.wikidata.org/wiki/Q846955","display_name":"RC4","level":4,"score":0.3856000006198883},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.3450999855995178},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.34470000863075256},{"id":"https://openalex.org/C311688","wikidata":"https://www.wikidata.org/wiki/Q2393193","display_name":"Time complexity","level":2,"score":0.30640000104904175},{"id":"https://openalex.org/C203062551","wikidata":"https://www.wikidata.org/wiki/Q201339","display_name":"Public-key cryptography","level":3,"score":0.2833000123500824},{"id":"https://openalex.org/C45737032","wikidata":"https://www.wikidata.org/wiki/Q748364","display_name":"S-box","level":4,"score":0.2784999907016754},{"id":"https://openalex.org/C112145980","wikidata":"https://www.wikidata.org/wiki/Q2569509","display_name":"Key schedule","level":5,"score":0.27720001339912415},{"id":"https://openalex.org/C94375191","wikidata":"https://www.wikidata.org/wiki/Q11205","display_name":"Arithmetic","level":1,"score":0.25380000472068787}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.46586/tosc.v2025.i3.368-399","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tosc.v2025.i3.368-399","pdf_url":"https://tosc.iacr.org/index.php/ToSC/article/download/12474/12188","source":{"id":"https://openalex.org/S4210236173","display_name":"IACR Transactions on Symmetric Cryptology","issn_l":"2519-173X","issn":["2519-173X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Symmetric Cryptology","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:28210f8c4a7d491e9425aab07f685c5e","is_oa":true,"landing_page_url":"https://doaj.org/article/28210f8c4a7d491e9425aab07f685c5e","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IACR Transactions on Symmetric Cryptology, Vol 2025, Iss 3 (2025)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.46586/tosc.v2025.i3.368-399","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tosc.v2025.i3.368-399","pdf_url":"https://tosc.iacr.org/index.php/ToSC/article/download/12474/12188","source":{"id":"https://openalex.org/S4210236173","display_name":"IACR Transactions on Symmetric Cryptology","issn_l":"2519-173X","issn":["2519-173X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Symmetric Cryptology","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G6490523223","display_name":null,"funder_award_id":"62372464","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4414527709.pdf","grobid_xml":"https://content.openalex.org/works/W4414527709.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"AEGIS":[0,24,45,103,136,150],"is":[1,25],"a":[2,156,227,251],"family":[3],"of":[4,38,60,73,85,93,117,131,149,158,220,247,254],"authenticated":[5],"encryption":[6,28],"with":[7,141,180,231],"associated":[8],"data":[9],"(AEAD)":[10],"ciphers":[11],"that":[12,32,151,190],"target":[13],"for":[14,216,223],"highly":[15],"efficient":[16,43],"implementations":[17],"in":[18,23,102,135,244],"software.":[19],"The":[20],"main":[21],"operation":[22],"the":[26,39,70,74,91,94,97,113,122,132,203,217,242,245,248],"AES":[27],"round":[29],"function":[30],"such":[31],"it":[33],"can":[34],"make":[35],"full":[36],"use":[37],"cryptographic":[40],"properties":[41,148],"and":[42,51,57,67,99,104,137,178,184,192,214,256],"implementation.":[44],"includes":[46],"three":[47],"variants":[48],"AEGIS-128,":[49,176],"AEGIS-128L,":[50],"AEGIS-256,":[52,177],"which":[53],"achieve":[54],"128,":[55,56],"256":[58],"bits":[59],"security,":[61],"respectively.":[62,186],"AEGIS-128":[63,191],"has":[64],"been":[65],"selected":[66],"included":[68],"into":[69,90],"final":[71],"portfolio":[72],"CAESAR":[75],"competition.":[76],"In":[77],"this":[78],"paper,":[79],"we":[80,126,145,169,225,240],"perform":[81,127,170],"multidimensional":[82,171],"linear":[83,139,162,167,172,218],"cryptanalysis":[84,219],"AEGIS.":[86],"We":[87,200],"first":[88],"dig":[89],"reason":[92],"inconsistency":[95],"between":[96],"byte":[98,124],"bit":[100],"trails":[101],"propose":[105],"an":[106],"improved":[107,204],"truncated":[108,205],"model":[109,206],"to":[110,154,207],"efficiently":[111],"derive":[112,138,155],"accurate":[114],"minimum":[115],"number":[116,157],"active":[118],"Sboxes.":[119],"Based":[120],"on":[121,175],"derived":[123],"trails,":[125],"deep":[128],"theoretical":[129],"analysis":[130],"correlation":[133,229],"propagation":[134],"approximations":[140],"high":[142],"correlations.":[143],"Moreover,":[144],"find":[146],"interesting":[147],"enable":[152],"us":[153],"equivalent":[159],"but":[160],"independent":[161],"approximations.":[163],"By":[164],"combining":[165],"these":[166],"approximations,":[168],"distinguishing":[173],"attacks":[174],"AEGIS-128L":[179],"complexities":[181],"2126.46,":[182],"2154.11,":[183],"2144.44,":[185],"These":[187],"results":[188],"suggest":[189],"AEGIS-256":[193],"do":[194],"not":[195],"meet":[196],"their":[197],"security":[198,237],"claims.":[199],"also":[201],"apply":[202],"two":[208],"AES-based":[209],"stream":[210],"cipher":[211],"families":[212],"LOL":[213],"Rocca":[215],"them.":[221],"Particularly,":[222],"LOL-MINI,":[224],"give":[226],"fast":[228],"attack":[230],"complexity":[232],"2250.5,":[233],"thereby":[234],"breaking":[235],"its":[236],"claim":[238],"if":[239],"ignore":[241],"restriction":[243],"length":[246],"keystream":[249],"under":[250],"single":[252],"pair":[253],"key":[255],"IV.":[257]},"counts_by_year":[],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-10-10T00:00:00"}