{"id":"https://openalex.org/W4414550178","doi":"https://doi.org/10.46586/tosc.v2025.i3.516-576","title":"Divide-and-Conquer SAT for Exploring Optimal Differential and Linear Characteristics and Its Applications","display_name":"Divide-and-Conquer SAT for Exploring Optimal Differential and Linear Characteristics and Its Applications","publication_year":2025,"publication_date":"2025-09-25","ids":{"openalex":"https://openalex.org/W4414550178","doi":"https://doi.org/10.46586/tosc.v2025.i3.516-576"},"language":"en","primary_location":{"id":"doi:10.46586/tosc.v2025.i3.516-576","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tosc.v2025.i3.516-576","pdf_url":"https://tosc.iacr.org/index.php/ToSC/article/download/12479/12192","source":{"id":"https://openalex.org/S4210236173","display_name":"IACR Transactions on Symmetric Cryptology","issn_l":"2519-173X","issn":["2519-173X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Symmetric Cryptology","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://tosc.iacr.org/index.php/ToSC/article/download/12479/12192","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5067836892","display_name":"Kazuma Taka","orcid":null},"institutions":[{"id":"https://openalex.org/I90023481","display_name":"National Institute of Information and Communications Technology","ror":"https://ror.org/016bgq349","country_code":"JP","type":"facility","lineage":["https://openalex.org/I90023481"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Kazuma Taka","raw_affiliation_strings":["The University of Osaka, Suita, Japan; National Institute of Information and Communications Technology, Koganei, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The University of Osaka, Suita, Japan; National Institute of Information and Communications Technology, Koganei, Japan","institution_ids":["https://openalex.org/I90023481"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5008561889","display_name":"Kosei Sakamoto","orcid":null},"institutions":[{"id":"https://openalex.org/I4210133125","display_name":"Mitsubishi Electric (Japan)","ror":"https://ror.org/033y26782","country_code":"JP","type":"company","lineage":["https://openalex.org/I1306287861","https://openalex.org/I4210133125"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Kosei Sakamoto","raw_affiliation_strings":["Mitsubishi Electric Corporation, Kamakura, Japan; The University of Osaka, Suita, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Mitsubishi Electric Corporation, Kamakura, Japan; The University of Osaka, Suita, Japan","institution_ids":["https://openalex.org/I4210133125"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5029704779","display_name":"Ryoma Ito","orcid":"https://orcid.org/0000-0002-4929-8974"},"institutions":[{"id":"https://openalex.org/I90023481","display_name":"National Institute of Information and Communications Technology","ror":"https://ror.org/016bgq349","country_code":"JP","type":"facility","lineage":["https://openalex.org/I90023481"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Ryoma Ito","raw_affiliation_strings":["National Institute of Information and Communications Technology, Koganei, Japan; The University of Osaka, Suita, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Institute of Information and Communications Technology, Koganei, Japan; The University of Osaka, Suita, Japan","institution_ids":["https://openalex.org/I90023481"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5084633260","display_name":"Rentaro Shiba","orcid":"https://orcid.org/0000-0003-2306-9978"},"institutions":[{"id":"https://openalex.org/I4210133125","display_name":"Mitsubishi Electric (Japan)","ror":"https://ror.org/033y26782","country_code":"JP","type":"company","lineage":["https://openalex.org/I1306287861","https://openalex.org/I4210133125"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Rentaro Shiba","raw_affiliation_strings":["Mitsubishi Electric Corporation, Kamakura, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Mitsubishi Electric Corporation, Kamakura, Japan","institution_ids":["https://openalex.org/I4210133125"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5022193556","display_name":"Shion Utsumi","orcid":"https://orcid.org/0009-0004-8136-0135"},"institutions":[{"id":"https://openalex.org/I180941496","display_name":"University of Hyogo","ror":"https://ror.org/0151bmh98","country_code":"JP","type":"education","lineage":["https://openalex.org/I180941496"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Shion Utsumi","raw_affiliation_strings":["University of Hyogo, Kobe, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Hyogo, Kobe, Japan","institution_ids":["https://openalex.org/I180941496"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5056480052","display_name":"Takanori Isobe","orcid":"https://orcid.org/0000-0003-4253-5567"},"institutions":[{"id":"https://openalex.org/I98285908","display_name":"The University of Osaka","ror":"https://ror.org/035t8zc32","country_code":"JP","type":"education","lineage":["https://openalex.org/I98285908"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Takanori Isobe","raw_affiliation_strings":["The University of Osaka, Suita, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The University of Osaka, Suita, Japan","institution_ids":["https://openalex.org/I98285908"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.5951,"has_fulltext":true,"cited_by_count":1,"citation_normalized_percentile":{"value":0.72486823,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":"2025","issue":"3","first_page":"516","last_page":"576"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11159","display_name":"Manufacturing Process and Optimization","score":0.5825999975204468,"subfield":{"id":"https://openalex.org/subfields/2209","display_name":"Industrial and Manufacturing Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11159","display_name":"Manufacturing Process and Optimization","score":0.5825999975204468,"subfield":{"id":"https://openalex.org/subfields/2209","display_name":"Industrial and Manufacturing Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10551","display_name":"Scheduling and Optimization Algorithms","score":0.5723000168800354,"subfield":{"id":"https://openalex.org/subfields/2209","display_name":"Industrial and Manufacturing Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/differential","display_name":"Differential (mechanical device)","score":0.5307000279426575},{"id":"https://openalex.org/keywords/boolean-function","display_name":"Boolean function","score":0.4950999915599823},{"id":"https://openalex.org/keywords/differential-cryptanalysis","display_name":"Differential cryptanalysis","score":0.49219998717308044},{"id":"https://openalex.org/keywords/linear-cryptanalysis","display_name":"Linear cryptanalysis","score":0.4706999957561493},{"id":"https://openalex.org/keywords/linear-programming","display_name":"Linear programming","score":0.42899999022483826},{"id":"https://openalex.org/keywords/variable","display_name":"Variable (mathematics)","score":0.3950999975204468},{"id":"https://openalex.org/keywords/block-cipher","display_name":"Block cipher","score":0.3617999851703644},{"id":"https://openalex.org/keywords/decimal","display_name":"Decimal","score":0.35519999265670776}],"concepts":[{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.5390999913215637},{"id":"https://openalex.org/C93226319","wikidata":"https://www.wikidata.org/wiki/Q193137","display_name":"Differential (mechanical device)","level":2,"score":0.5307000279426575},{"id":"https://openalex.org/C187455244","wikidata":"https://www.wikidata.org/wiki/Q942353","display_name":"Boolean function","level":2,"score":0.4950999915599823},{"id":"https://openalex.org/C36123800","wikidata":"https://www.wikidata.org/wiki/Q1224471","display_name":"Differential cryptanalysis","level":4,"score":0.49219998717308044},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.4869999885559082},{"id":"https://openalex.org/C82424418","wikidata":"https://www.wikidata.org/wiki/Q1826463","display_name":"Linear cryptanalysis","level":4,"score":0.4706999957561493},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.4415999948978424},{"id":"https://openalex.org/C41045048","wikidata":"https://www.wikidata.org/wiki/Q202843","display_name":"Linear programming","level":2,"score":0.42899999022483826},{"id":"https://openalex.org/C182365436","wikidata":"https://www.wikidata.org/wiki/Q50701","display_name":"Variable (mathematics)","level":2,"score":0.3950999975204468},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.3637999892234802},{"id":"https://openalex.org/C106544461","wikidata":"https://www.wikidata.org/wiki/Q543151","display_name":"Block cipher","level":3,"score":0.3617999851703644},{"id":"https://openalex.org/C65045869","wikidata":"https://www.wikidata.org/wiki/Q81365","display_name":"Decimal","level":2,"score":0.35519999265670776},{"id":"https://openalex.org/C311688","wikidata":"https://www.wikidata.org/wiki/Q2393193","display_name":"Time complexity","level":2,"score":0.3441999852657318},{"id":"https://openalex.org/C74750220","wikidata":"https://www.wikidata.org/wiki/Q2662197","display_name":"Differential evolution","level":2,"score":0.32989999651908875},{"id":"https://openalex.org/C126255220","wikidata":"https://www.wikidata.org/wiki/Q141495","display_name":"Mathematical optimization","level":1,"score":0.30160000920295715},{"id":"https://openalex.org/C133226019","wikidata":"https://www.wikidata.org/wiki/Q209812","display_name":"Linear span","level":2,"score":0.28700000047683716},{"id":"https://openalex.org/C186394612","wikidata":"https://www.wikidata.org/wiki/Q7098942","display_name":"Optimal design","level":2,"score":0.2849999964237213},{"id":"https://openalex.org/C181149355","wikidata":"https://www.wikidata.org/wiki/Q897511","display_name":"Cryptanalysis","level":3,"score":0.2818000018596649},{"id":"https://openalex.org/C6802819","wikidata":"https://www.wikidata.org/wiki/Q1072174","display_name":"Linear system","level":2,"score":0.27090001106262207},{"id":"https://openalex.org/C201789804","wikidata":"https://www.wikidata.org/wiki/Q2362762","display_name":"Search problem","level":2,"score":0.26809999346733093},{"id":"https://openalex.org/C111797529","wikidata":"https://www.wikidata.org/wiki/Q17080584","display_name":"Maximum satisfiability problem","level":3,"score":0.26589998602867126},{"id":"https://openalex.org/C125583679","wikidata":"https://www.wikidata.org/wiki/Q755673","display_name":"Search algorithm","level":2,"score":0.26080000400543213},{"id":"https://openalex.org/C7342684","wikidata":"https://www.wikidata.org/wiki/Q520777","display_name":"Boolean data type","level":2,"score":0.2597000002861023},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.2572000026702881}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.46586/tosc.v2025.i3.516-576","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tosc.v2025.i3.516-576","pdf_url":"https://tosc.iacr.org/index.php/ToSC/article/download/12479/12192","source":{"id":"https://openalex.org/S4210236173","display_name":"IACR Transactions on Symmetric Cryptology","issn_l":"2519-173X","issn":["2519-173X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Symmetric Cryptology","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:7753c9f18dc2487c9413107c03f90573","is_oa":true,"landing_page_url":"https://doaj.org/article/7753c9f18dc2487c9413107c03f90573","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IACR Transactions on Symmetric Cryptology, Vol 2025, Iss 3 (2025)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.46586/tosc.v2025.i3.516-576","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tosc.v2025.i3.516-576","pdf_url":"https://tosc.iacr.org/index.php/ToSC/article/download/12479/12192","source":{"id":"https://openalex.org/S4210236173","display_name":"IACR Transactions on Symmetric Cryptology","issn_l":"2519-173X","issn":["2519-173X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Symmetric Cryptology","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320334764","display_name":"Japan Society for the Promotion of Science","ror":"https://ror.org/00hhkn466"}],"has_content":{"grobid_xml":false,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4414550178.pdf"},"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Developing":[0],"automatic":[1,43],"search":[2,44],"tools":[3],"to":[4,74,112,137],"derive":[5,114],"optimal":[6,115,139,201],"characteristics":[7,117,143],"is":[8,135],"crucial":[9],"for":[10,100,118,128,171,181,193],"both":[11,56],"the":[12,48,53,79,105,129,145,166,190],"design":[13],"and":[14,26,58,141,161,173,184,198,203],"cryptanalysis":[15],"of":[16,55,78,81,108,148,150,169,196],"symmetric-key":[17],"primitives.":[18],"However,":[19],"evaluating":[20],"primitives":[21],"that":[22,51,85,103],"employ":[23],"large":[24,101,120],"S-boxes":[25,102],"complex":[27],"linear":[28,116,142,174,202],"layers":[29],"remains":[30],"a":[31,40,64,87,97,119,125,178],"computationally":[32],"demanding":[33],"task.":[34],"In":[35,93],"this":[36],"paper,":[37],"we":[38,95],"introduce":[39],"novel":[41],"solver-aided":[42],"tool":[45,134,188],"based":[46,176],"on":[47,177],"divide-and-conquer":[49],"strategy":[50],"leverages":[52],"advantages":[54],"MILP":[57],"SAT":[59,66,71,89],"methods.":[60],"Our":[61,163],"method":[62,99],"divides":[63],"given":[65,88],"model":[67,90],"into":[68],"multiple":[69],"smaller":[70],"models,":[72],"allowing":[73],"pre-eliminate":[75],"as":[76],"much":[77],"space":[80],"Boolean":[82],"variable":[83],"assignments":[84],"make":[86],"always":[91],"\u201cUNSAT\u201d.":[92],"addition,":[94],"propose":[96],"new":[98,133],"involves":[104],"decimal":[106],"parts":[107],"values,":[109],"enabling":[110],"us":[111],"efficiently":[113],"S-box-based":[121],"primitive,":[122],"all":[123],"within":[124],"practical":[126],"time":[127],"first":[130],"time.":[131],"The":[132],"able":[136],"obtain":[138],"differential":[140,172,204],"in":[144],"significant":[146],"number":[147,168],"rounds":[149,170],"AES,":[151],"Camellia":[152],"without":[153],"FL":[154],"function,":[155],"ARIA,":[156],"LED,":[157,183],"Midori-128,":[158],"SKINNY-":[159],"128,":[160],"Rijndael-256-256.":[162],"results":[164],"improve":[165],"required":[167],"attacks,":[175],"single":[179],"characteristic,":[180],"Camellia,":[182],"Midori-128.":[185],"Besides,":[186],"our":[187],"identifies":[189],"longest":[191],"distinguisher":[192],"extensivelyanalyzed":[194],"ciphers":[195],"Camellia/ARIA/Midori-128":[197],"SKINNY-128":[199],"by":[200],"ones,":[205],"respectively.":[206]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-07-25T09:21:30.201066","created_date":"2025-10-10T00:00:00"}