{"id":"https://openalex.org/W4417433312","doi":"https://doi.org/10.46586/tosc.v2025.i4.357-380","title":"Chosen-IV Algebraic Attack on Randomized Ciphers FASTA and HERA","display_name":"Chosen-IV Algebraic Attack on Randomized Ciphers FASTA and HERA","publication_year":2025,"publication_date":"2025-12-17","ids":{"openalex":"https://openalex.org/W4417433312","doi":"https://doi.org/10.46586/tosc.v2025.i4.357-380"},"language":"en","primary_location":{"id":"doi:10.46586/tosc.v2025.i4.357-380","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tosc.v2025.i4.357-380","pdf_url":"https://tosc.iacr.org/index.php/ToSC/article/download/12620/12335","source":{"id":"https://openalex.org/S4210236173","display_name":"IACR Transactions on Symmetric Cryptology","issn_l":"2519-173X","issn":["2519-173X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Symmetric Cryptology","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://tosc.iacr.org/index.php/ToSC/article/download/12620/12335","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5003177942","display_name":"Fukang Liu","orcid":null},"institutions":[{"id":"https://openalex.org/I4400009020","display_name":"Institute of Science Tokyo","ror":"https://ror.org/05dqf9946","country_code":null,"type":"education","lineage":["https://openalex.org/I4400009020"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Fukang Liu","raw_affiliation_strings":["Institute of Science Tokyo, Tokyo, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Science Tokyo, Tokyo, Japan","institution_ids":["https://openalex.org/I4400009020"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Tianning Wang","orcid":null},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Tianning Wang","raw_affiliation_strings":["School of Computer Science, Shanghai Jiao Tong University, Shanghai, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science, Shanghai Jiao Tong University, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5073787442","display_name":"Jianqiang Ni","orcid":"https://orcid.org/0000-0001-8314-4402"},"institutions":[{"id":"https://openalex.org/I66867065","display_name":"East China Normal University","ror":"https://ror.org/02n96ep67","country_code":"CN","type":"education","lineage":["https://openalex.org/I66867065"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jianqiang Ni","raw_affiliation_strings":["East China Normal University, Shanghai, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"East China Normal University, Shanghai, China","institution_ids":["https://openalex.org/I66867065"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101730821","display_name":"Daisuke Yamamoto","orcid":"https://orcid.org/0000-0002-2628-7172"},"institutions":[{"id":"https://openalex.org/I4400009020","display_name":"Institute of Science Tokyo","ror":"https://ror.org/05dqf9946","country_code":null,"type":"education","lineage":["https://openalex.org/I4400009020"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Daisuke Yamamoto","raw_affiliation_strings":["Institute of Science Tokyo, Tokyo, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Science Tokyo, Tokyo, Japan","institution_ids":["https://openalex.org/I4400009020"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5108120171","display_name":"G. Sato","orcid":null},"institutions":[{"id":"https://openalex.org/I4400009020","display_name":"Institute of Science Tokyo","ror":"https://ror.org/05dqf9946","country_code":null,"type":"education","lineage":["https://openalex.org/I4400009020"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Guilherme T. S. Sato","raw_affiliation_strings":["Institute of Science Tokyo, Tokyo, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Science Tokyo, Tokyo, Japan","institution_ids":["https://openalex.org/I4400009020"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100741708","display_name":"Haoyang Wang","orcid":"https://orcid.org/0009-0002-1700-5919"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Haoyang Wang","raw_affiliation_strings":["School of Computer Science, Shanghai Jiao Tong University, Shanghai, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science, Shanghai Jiao Tong University, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5086309954","display_name":"Willi Meier","orcid":"https://orcid.org/0000-0003-4594-1501"},"institutions":[{"id":"https://openalex.org/I2972652528","display_name":"FHNW University of Applied Sciences and Arts Northwestern Switzerland","ror":"https://ror.org/04mq2g308","country_code":"CH","type":"education","lineage":["https://openalex.org/I2972652528"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Willi Meier","raw_affiliation_strings":["University of Applied Sciences and Arts Northwestern Switzerland, Windisch, Switzerland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Applied Sciences and Arts Northwestern Switzerland, Windisch, Switzerland","institution_ids":["https://openalex.org/I2972652528"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.20410748,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"2025","issue":"4","first_page":"357","last_page":"380"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.6730999946594238,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.6730999946594238,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.2669999897480011,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11130","display_name":"Coding theory and cryptography","score":0.01889999955892563,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/homomorphic-encryption","display_name":"Homomorphic encryption","score":0.6421999931335449},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.5922999978065491},{"id":"https://openalex.org/keywords/algebraic-number","display_name":"Algebraic number","score":0.511900007724762},{"id":"https://openalex.org/keywords/cryptanalysis","display_name":"Cryptanalysis","score":0.5108000040054321},{"id":"https://openalex.org/keywords/gr\u00f6bner-basis","display_name":"Gr\u00f6bner basis","score":0.420199990272522},{"id":"https://openalex.org/keywords/keystream","display_name":"Keystream","score":0.4043000042438507},{"id":"https://openalex.org/keywords/affine-transformation","display_name":"Affine transformation","score":0.39250001311302185},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.38269999623298645}],"concepts":[{"id":"https://openalex.org/C158338273","wikidata":"https://www.wikidata.org/wiki/Q2154943","display_name":"Homomorphic encryption","level":3,"score":0.6421999931335449},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5932000279426575},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.5922999978065491},{"id":"https://openalex.org/C9376300","wikidata":"https://www.wikidata.org/wiki/Q168817","display_name":"Algebraic number","level":2,"score":0.511900007724762},{"id":"https://openalex.org/C181149355","wikidata":"https://www.wikidata.org/wiki/Q897511","display_name":"Cryptanalysis","level":3,"score":0.5108000040054321},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.4788999855518341},{"id":"https://openalex.org/C198082693","wikidata":"https://www.wikidata.org/wiki/Q1551631","display_name":"Gr\u00f6bner basis","level":3,"score":0.420199990272522},{"id":"https://openalex.org/C2776132008","wikidata":"https://www.wikidata.org/wiki/Q1509893","display_name":"Keystream","level":4,"score":0.4043000042438507},{"id":"https://openalex.org/C92757383","wikidata":"https://www.wikidata.org/wiki/Q382497","display_name":"Affine transformation","level":2,"score":0.39250001311302185},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.38269999623298645},{"id":"https://openalex.org/C182419690","wikidata":"https://www.wikidata.org/wiki/Q205464","display_name":"Algebraic structure","level":2,"score":0.3612000048160553},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.34200000762939453},{"id":"https://openalex.org/C184992742","wikidata":"https://www.wikidata.org/wiki/Q7243229","display_name":"Prime (order theory)","level":2,"score":0.33869999647140503},{"id":"https://openalex.org/C92950451","wikidata":"https://www.wikidata.org/wiki/Q864718","display_name":"Stream cipher","level":3,"score":0.33230000734329224},{"id":"https://openalex.org/C33884865","wikidata":"https://www.wikidata.org/wiki/Q1254335","display_name":"Cryptographic protocol","level":3,"score":0.3165000081062317},{"id":"https://openalex.org/C110812573","wikidata":"https://www.wikidata.org/wiki/Q175515","display_name":"Symbolic computation","level":2,"score":0.3138999938964844},{"id":"https://openalex.org/C311688","wikidata":"https://www.wikidata.org/wiki/Q2393193","display_name":"Time complexity","level":2,"score":0.3095000088214874},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.3084999918937683},{"id":"https://openalex.org/C45374587","wikidata":"https://www.wikidata.org/wiki/Q12525525","display_name":"Computation","level":2,"score":0.30660000443458557},{"id":"https://openalex.org/C179799912","wikidata":"https://www.wikidata.org/wiki/Q205084","display_name":"Computational complexity theory","level":2,"score":0.304500013589859},{"id":"https://openalex.org/C162319229","wikidata":"https://www.wikidata.org/wiki/Q175263","display_name":"Data structure","level":2,"score":0.26510000228881836}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.46586/tosc.v2025.i4.357-380","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tosc.v2025.i4.357-380","pdf_url":"https://tosc.iacr.org/index.php/ToSC/article/download/12620/12335","source":{"id":"https://openalex.org/S4210236173","display_name":"IACR Transactions on Symmetric Cryptology","issn_l":"2519-173X","issn":["2519-173X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Symmetric Cryptology","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:5b707c39704f4b94ab0f191b862bcb32","is_oa":true,"landing_page_url":"https://doaj.org/article/5b707c39704f4b94ab0f191b862bcb32","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IACR Transactions on Symmetric Cryptology, Vol 2025, Iss 4 (2025)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.46586/tosc.v2025.i4.357-380","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tosc.v2025.i4.357-380","pdf_url":"https://tosc.iacr.org/index.php/ToSC/article/download/12620/12335","source":{"id":"https://openalex.org/S4210236173","display_name":"IACR Transactions on Symmetric Cryptology","issn_l":"2519-173X","issn":["2519-173X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Symmetric Cryptology","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G4896272386","display_name":null,"funder_award_id":"62472172","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320334764","display_name":"Japan Society for the Promotion of Science","ror":"https://ror.org/00hhkn466"},{"id":"https://openalex.org/F4320335787","display_name":"Fundamental Research Funds for the Central Universities","ror":null}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4417433312.pdf","grobid_xml":"https://content.openalex.org/works/W4417433312.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Fully":[0],"homomorphic":[1,46],"encryption":[2],"(FHE)":[3],"enables":[4],"computation":[5],"on":[6,22,143,186,200,276],"encrypted":[7],"data":[8,155],"without":[9],"decryption,":[10],"providing":[11],"strong":[12],"guarantees":[13],"for":[14],"privacy-preserving":[15],"applications.":[16],"However,":[17],"its":[18,102,242],"practicality":[19],"heavily":[20],"depends":[21],"the":[23,26,82,113,127,131,139,159,173,187,194,214,217,222,229,233,239,250,264,268],"efficiency":[24],"of":[25,53,73,95,101,119,130,176,208,216,224,232,241,267],"underlying":[27],"cryptographic":[28],"primitives.":[29],"To":[30],"this":[31,87],"end,":[32],"FHE-friendly":[33,59,277],"symmetric":[34,278],"ciphers":[35],"have":[36],"been":[37],"designed":[38],"to":[39],"achieve":[40,138],"a":[41,135,246],"balance":[42],"between":[43,249],"security":[44],"and":[45,55,66,75,115,154,252],"efficiency.":[47],"Among":[48],"them,":[49],"FASTA":[50,74,96,120],"(a":[51],"variant":[52],"Rasta)":[54],"HERA":[56,76],"are":[57],"two":[58],"symmetric-key":[60],"primitives":[61],"proposed":[62],"at":[63],"CT-RSA":[64],"2022":[65],"ASIACRYPT":[67],"2021,":[68],"respectively.":[69],"Previous":[70],"cryptanalytic":[71],"results":[72],"were":[77,204],"achieved":[78,257],"by":[79,97,162],"peeling":[80],"off":[81],"last":[83,116],"nonlinear":[84,117],"layer.":[85],"In":[86],"paper,":[88],"we":[89,137],"present":[90],"an":[91],"improved":[92,260],"algebraic":[93,107,128,170,183,235,274],"cryptanalysis":[94],"exploiting":[98],"structural":[99],"properties":[100],"affine":[103,174],"layers":[104,118],"through":[105],"chosen-IV":[106,182,234],"attacks.":[108],"We":[109],"demonstrate":[110],"that":[111,203],"both":[112],"first":[114,140],"can":[121,255],"be":[122,256],"removed,":[123],"which":[124],"significantly":[125,192],"reduces":[126],"degree":[129],"resulting":[132],"system.":[133],"As":[134],"result,":[136],"key-recovery":[141],"attack":[142,161,184],"4-round":[144],"FASTA,":[145],"with":[146],"time":[147],"complexity":[148,152,156,254],"about":[149],"2118.8,":[150],"memory":[151],"294.2,":[153],"234.1,":[157],"improving":[158],"best":[160],"1":[163],"round.":[164],"Overall,":[165],"our":[166,180,259],"findings":[167],"reveal":[168],"exploitable":[169],"weaknesses":[171],"in":[172,258,271],"layer":[175],"FASTA.":[177],"For":[178],"HERA,":[179],"refined":[181],"based":[185],"eXtended":[188],"Linearization":[189],"(XL)":[190],"algorithm":[191,219,270],"enlarges":[193],"feasible":[195],"parameter":[196],"range,":[197],"enabling":[198,272],"attacks":[199,275],"prime":[201],"moduli":[202],"previously":[205],"considered":[206],"out":[207],"reach.":[209],"This":[210,262],"is":[211],"mainly":[212],"because":[213],"integration":[215],"XL":[218,269],"further":[220],"decreases":[221],"number":[223],"keystream":[225],"words":[226],"required":[227],"during":[228],"online":[230,253],"phase":[231],"attack,":[236],"thus":[237],"reducing":[238],"cost":[240],"offline":[243,251],"phase,":[244],"i.e.,":[245],"better":[247],"tradeoff":[248],"attack.":[261],"highlights":[263],"central":[265],"role":[266],"efficient":[273],"ciphers.":[279]},"counts_by_year":[],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-12-17T00:00:00"}