{"id":"https://openalex.org/W2298415206","doi":"https://doi.org/10.1049/iet-ifs.2015.0427","title":"Improved conditional differential attacks on Grain v1","display_name":"Improved conditional differential attacks on Grain v1","publication_year":2016,"publication_date":"2016-03-04","ids":{"openalex":"https://openalex.org/W2298415206","doi":"https://doi.org/10.1049/iet-ifs.2015.0427","mag":"2298415206"},"language":"en","primary_location":{"is_oa":false,"landing_page_url":"https://doi.org/10.1049/iet-ifs.2015.0427","pdf_url":null,"source":{"id":"https://openalex.org/S58852226","display_name":"IET Information Security","issn_l":"1751-8709","issn":["1751-8709","1751-8717"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310311714","host_organization_name":"Institution of Engineering and Technology","host_organization_lineage":["https://openalex.org/P4310311714"],"host_organization_lineage_names":["Institution of Engineering and Technology"],"type":"journal"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false},"type":"article","type_crossref":"journal-article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5084574395","display_name":"Zhen Ma","orcid":"https://orcid.org/0000-0002-4883-0981"},"institutions":[{"id":"https://openalex.org/I918919364","display_name":"Switch","ror":"https://ror.org/02yw51758","country_code":"CH","type":"nonprofit","lineage":["https://openalex.org/I918919364"]},{"id":"https://openalex.org/I4210132990","display_name":"State Key Laboratory of Cryptology","ror":"https://ror.org/02pn5rj08","country_code":"CN","type":"government","lineage":["https://openalex.org/I4210132990"]}],"countries":["CH","CN"],"is_corresponding":true,"raw_author_name":"Zhen Ma","raw_affiliation_strings":["National Digital Switching System Engineering & Technological Research CenterP.O. Box 407, 62 Kexue RoadZhengzhou450001China","State Key Laboratory of CryptologyP.O. Box 5159Beijing100878People's Republic of China"],"affiliations":[{"raw_affiliation_string":"National Digital Switching System Engineering & Technological Research CenterP.O. Box 407, 62 Kexue RoadZhengzhou450001China","institution_ids":["https://openalex.org/I918919364"]},{"raw_affiliation_string":"State Key Laboratory of CryptologyP.O. Box 5159Beijing100878People's Republic of China","institution_ids":["https://openalex.org/I4210132990"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100419125","display_name":"Tian Tian","orcid":"https://orcid.org/0000-0002-6044-9083"},"institutions":[{"id":"https://openalex.org/I918919364","display_name":"Switch","ror":"https://ror.org/02yw51758","country_code":"CH","type":"nonprofit","lineage":["https://openalex.org/I918919364"]}],"countries":["CH"],"is_corresponding":true,"raw_author_name":"Tian Tian","raw_affiliation_strings":["National Digital Switching System Engineering & Technological Research CenterP.O. Box 407, 62 Kexue RoadZhengzhou450001China"],"affiliations":[{"raw_affiliation_string":"National Digital Switching System Engineering & Technological Research CenterP.O. Box 407, 62 Kexue RoadZhengzhou450001China","institution_ids":["https://openalex.org/I918919364"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101738495","display_name":"Wen\u2010Feng Qi","orcid":"https://orcid.org/0000-0002-3031-4719"},"institutions":[{"id":"https://openalex.org/I918919364","display_name":"Switch","ror":"https://ror.org/02yw51758","country_code":"CH","type":"nonprofit","lineage":["https://openalex.org/I918919364"]}],"countries":["CH"],"is_corresponding":true,"raw_author_name":"Wen\u2010Feng Qi","raw_affiliation_strings":["National Digital Switching System Engineering & Technological Research CenterP.O. Box 407, 62 Kexue RoadZhengzhou450001China"],"affiliations":[{"raw_affiliation_string":"National Digital Switching System Engineering & Technological Research CenterP.O. Box 407, 62 Kexue RoadZhengzhou450001China","institution_ids":["https://openalex.org/I918919364"]}]}],"institution_assertions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5084574395","https://openalex.org/A5100419125","https://openalex.org/A5101738495"],"corresponding_institution_ids":["https://openalex.org/I918919364","https://openalex.org/I4210132990","https://openalex.org/I918919364","https://openalex.org/I918919364"],"apc_list":{"value":2000,"currency":"EUR","value_usd":2200,"provenance":"doaj"},"apc_paid":null,"fwci":1.692,"has_fulltext":false,"cited_by_count":13,"citation_normalized_percentile":{"value":0.90121,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":88,"max":89},"biblio":{"volume":"11","issue":"1","first_page":"46","last_page":"53"},"is_retracted":false,"is_paratext":false,"primary_topic":{"id":"https://openalex.org/T10951","display_name":"Cryptanalysis of Block Ciphers and Hash Functions","score":0.9999,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10951","display_name":"Cryptanalysis of Block Ciphers and Hash Functions","score":0.9999,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11130","display_name":"Cryptography and Error-Correcting Codes","score":0.9927,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11017","display_name":"Chaos-based Image Encryption Techniques","score":0.9904,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/differential-cryptanalysis","display_name":"Differential Cryptanalysis","score":0.554506},{"id":"https://openalex.org/keywords/cryptanalysis","display_name":"Cryptanalysis","score":0.522111},{"id":"https://openalex.org/keywords/security-analysis","display_name":"Security Analysis","score":0.516455}],"concepts":[{"id":"https://openalex.org/C93226319","wikidata":"https://www.wikidata.org/wiki/Q193137","display_name":"Differential (mechanical device)","level":2,"score":0.67510664},{"id":"https://openalex.org/C6295992","wikidata":"https://www.wikidata.org/wiki/Q976521","display_name":"Cryptosystem","level":3,"score":0.5368391},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.4938217},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.47121635},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.4149417},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.40899026},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.25687677},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.123587996},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.070272535},{"id":"https://openalex.org/C97355855","wikidata":"https://www.wikidata.org/wiki/Q11473","display_name":"Thermodynamics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"is_oa":false,"landing_page_url":"https://doi.org/10.1049/iet-ifs.2015.0427","pdf_url":null,"source":{"id":"https://openalex.org/S58852226","display_name":"IET Information Security","issn_l":"1751-8709","issn":["1751-8709","1751-8717"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310311714","host_organization_name":"Institution of Engineering and Technology","host_organization_lineage":["https://openalex.org/P4310311714"],"host_organization_lineage_names":["Institution of Engineering and Technology"],"type":"journal"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false}],"best_oa_location":null,"sustainable_development_goals":[],"grants":[{"funder":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China","award_id":"61272042"}],"datasets":[],"versions":[],"referenced_works_count":14,"referenced_works":["https://openalex.org/W1238158613","https://openalex.org/W1477955099","https://openalex.org/W1572847050","https://openalex.org/W158976513","https://openalex.org/W1903742260","https://openalex.org/W2076397729","https://openalex.org/W2103239853","https://openalex.org/W2105611869","https://openalex.org/W2160494425","https://openalex.org/W2405185250","https://openalex.org/W2951858559","https://openalex.org/W359206926","https://openalex.org/W6399285","https://openalex.org/W97949831"],"related_works":["https://openalex.org/W4245490552","https://openalex.org/W4225152035","https://openalex.org/W3002753104","https://openalex.org/W2911598644","https://openalex.org/W2077600819","https://openalex.org/W2061531152","https://openalex.org/W2042127053","https://openalex.org/W2007980826","https://openalex.org/W1979597421","https://openalex.org/W1587224694"],"abstract_inverted_index":{"IET":[0],"Information":[1],"SecurityVolume":[2],"11,":[3,2246],"Issue":[4],"1":[5,488,1069,1545,1692,2349,2370,2386,2405,2414,2527,2613,2655,2858,2972,3016,3044,3061,3076,3092,3387,3398,3658,3857,4132,4473,4780],"p.":[6],"46-53":[7],"Research":[8,29,70,100,128,169,199],"ArticleFree":[9],"Access":[10],"Improved":[11,2796,4807],"conditional":[12,326,368,410,430,579,607,645],"differential":[13,293,327,340,348,369,411,431,580,584,608,611,646,728,928,939,957,961,1115,1685,1807,2314,2594,2641,2791,2797,2844,3118,3161,3169,3512,3517,3928,4609,4884],"attacks":[14,328,412,432,458,800,1243,4850],"on":[15,295,329,371,398,413,540,574,606,613,654,668,754,781,801,860,877,901,916,987,1121,1132,1161,1209,1268,1278,1293,1687,1910,1922,1942,1976,1999,2200,2210,2238,2250,2321,2709,2764,2778,3150,3182,3280,3285,3305,3322,3333,3614,4036,4118,4193,4532,4642,4745,4809,4823,4826,4860,4910],"Grain":[16,318,330,351,377,417,442,454,476,490,575,739,758,765,783,802,862,879,903,917,964,988,1021,1136,1163,1197,1211,1239,1269,1282,1298,1384,1413,1418,1420,1482,1635,1672,1688,1723,1748,1816,1854,1879,1886,2201,2211,2239,2252,2256,2303,2307,2489,2551,2624,2676,2711,2723,2733,2750,2768,2782,2867,3172,3185,3282,3287,3307,3325,3336,3408,3429,3522,3944,4038,4123,4536,4748,4813,4839,4864,4879],"v1":[17,331,418,443,477,491,576,759,766,784,803,863,880,904,918,965,1022,1137,1198,1270,1283,1299,1385,1419,1421,1636,1724,1749,1817,1855,1880,1887,2202,2212,2253,2257,2304,2490,2712,2724,2734,2751,2769,3173,3283,3288,3326,3337,3409,3523,3945,4039,4814,4840,4865],"Zhen":[18,20,117,119],"Ma,":[19,118],"Ma":[21,120],"National":[22,63,93,121,162,192],"Digital":[23,64,94,122,163,193],"Switching":[24,65,95,123,164,194],"System":[25,66,96,124,165,195],"Engineering":[26,67,97,125,166,196],"&":[27,68,98,126,167,197],"Technological":[28,69,99,127,168,198],"Center,":[30,71,101,129,170,200],"P.O.":[31,45,72,102,130,144,171,201],"Box":[32,46,73,103,131,145,172,202],"407,":[33,74,104,132,173,203],"62":[34,75,105,133,174,204],"Kexue":[35,76,106,134,175,205],"Road,":[36,77,107,135,176,206],"Zhengzhou,":[37,78,108,136,177,207],"450001":[38,79,109,137,178,208],"China":[39,138],"State":[40,139],"Key":[41,140],"Laboratory":[42,141],"of":[43,52,142,151,242,252,265,276,317,350,376,416,475,483,518,643,676,724,738,746,757,813,885,963,972,977,1001,1015,1020,1051,1067,1135,1148,1179,1196,1264,1297,1341,1375,1377,1401,1412,1417,1446,1467,1481,1492,1559,1582,1634,1671,1701,1716,1741,1809,1841,1853,1862,1878,1902,1920,1935,1947,2052,2079,2090,2135,2150,2218,2261,2301,2316,2453,2482,2496,2505,2507,2568,2600,2643,2652,2675,2749,2757,2866,2877,2887,2891,2898,2906,2913,2928,2937,2939,2944,3007,3040,3154,3171,3212,3218,3230,3244,3249,3252,3354,3407,3428,3496,3505,3519,3540,3543,3552,3567,3608,3744,3747,3754,3791,3798,3821,3828,3840,3869,3872,3882,3943,3956,4112,4122,4141,4156,4208,4224,4270,4320,4366,4396,4452,4456,4483,4535,4571,4617,4671,4686,4708,4812,4857,4863,4920,4963,4969,5025],"Cryptology,":[44,143],"5159,":[47,146],"Beijing,":[48,147],"100878":[49,148],"People's":[50,149],"Republic":[51,150],"ChinaSearch":[53,80,110,152,179,209],"for":[54,81,111,153,180,210,366,440,452,471,636,649,767,1193,1237,1349,1372,1527,1536,1546,1888,1952,2574,2621,2721,2745,2816,2960,3017,3033,3082,3234,3320,3331,3373,3381,3415,3468,3524,3934,3940,3971,3984,4085,4332,4838],"more":[55,82,112,154,181,211,420,1139,1200,2232,4087,4103,4108,4426,4471,4518,4522,4539,4573,4842],"papers":[56,83,113,155,182,212],"by":[57,84,114,156,183,213,301,500,619,628,663,819,969,982,1029,1081,1346,1362,1501,1523,1703,1731,1762,1781,2122,2416,2787,3103,3125,4400,4639,4757],"this":[58,85,115,157,184,214,277,321,602,652,910,951,1031,1059,1308,1314,2042,2105,2262,2771,2829,2834,3136,3223,3602,4182,4254,4373,4595,4632,4636,4764,4816],"authorTian":[59,158],"Tian,":[60,159],"Tian":[61,62,160,161],"authorWen-Feng":[86,185],"Qi,":[87,186],"Corresponding":[88,187],"Author":[89,188],"Wen-Feng":[90,189],"Qi":[91,190],"wenfeng.qi@263.net":[92,191],"author":[116,215,797,2693],"First":[216],"published:":[217],"01":[218],"January":[219],"2017":[220],"https://doi.org/10.1049/iet-ifs.2015.0427Citations:":[221],"8AboutSectionsPDF":[222],"ToolsRequest":[223],"permissionExport":[224],"citationAdd":[225],"to":[226,248,271,313,344,362,408,658,698,720,734,809,959,1007,1042,1104,1108,1129,1159,1216,1391,1397,1404,1624,1628,1684,1727,1792,1893,1971,1994,2048,2055,2066,2096,2103,2152,2289,2291,2344,2391,2440,2463,2477,2591,2604,2610,2634,2662,2667,2826,2855,2873,2934,2947,2963,2969,3003,3026,3050,3065,3080,3096,3128,3135,3208,3291,3303,3367,3371,3376,3460,3501,3515,3587,3649,3720,3902,3909,3932,4000,4024,4163,4169,4228,4293,4303,4307,4337,4347,4386,4516,4556,4578,4594,4601,4663,4695,4725,4736,4772,4777,4786,4852,4888,4893,4914,4937,4954,4972,5016,5021],"favoritesTrack":[227],"citation":[228],"ShareShare":[229],"Give":[230],"accessShare":[231,234],"full":[232],"text":[233],"full-text":[235,250,274],"accessPlease":[236],"review":[237,1263,2206],"our":[238,465,1154,1183,1228,2071,2776,3483,3783,4098,4160,4513,4824,4894],"Terms":[239,262],"and":[240,244,256,263,282,308,402,444,503,522,529,555,596,665,695,778,804,821,832,953,1023,1124,1319,1326,1348,1387,1394,1433,1459,1495,1510,1542,1562,1574,1592,1618,1627,1650,1656,1659,1719,1732,1744,1755,1767,1775,1783,1805,1812,1821,1869,1912,2068,2084,2092,2130,2225,2254,2274,2305,2333,2363,2384,2402,2420,2425,2542,2608,2646,2701,2725,2822,2840,2853,2917,2932,2967,3021,3045,3062,3077,3093,3115,3144,3156,3215,3284,3445,3453,3467,3560,3592,3625,3633,3692,3710,3863,3881,3950,3979,4080,4105,4129,4148,4241,4292,4324,4363,4425,4468,4493,4520,4659,4683,4781,5046],"Conditions":[241,264],"Use":[243,4930],"check":[245,2827],"box":[246],"below":[247,270],"share":[249,272],"version":[251,275,745,2217],"article.I":[253],"have":[254,824,3465,3662,4700],"read":[255],"accept":[257],"the":[258,268,333,347,367,396,399,403,414,428,457,468,472,481,565,629,640,644,660,669,674,677,680,693,703,709,718,722,752,755,779,796,811,882,899,920,927,938,946,970,974,983,1012,1024,1062,1068,1074,1089,1105,1111,1119,1133,1146,1149,1194,1206,1242,1265,1279,1316,1322,1330,1334,1354,1373,1399,1409,1468,1490,1493,1496,1556,1560,1563,1598,1601,1612,1621,1625,1629,1697,1712,1717,1720,1739,1742,1745,1776,1806,1810,1813,1831,1839,1860,1863,1870,1918,1923,1933,1936,1945,1957,1973,1987,1996,2002,2014,2018,2032,2050,2087,2097,2108,2112,2117,2133,2154,2157,2169,2172,2187,2207,2220,2226,2235,2284,2294,2297,2313,2411,2434,2451,2454,2483,2487,2503,2514,2524,2531,2553,2575,2644,2647,2669,2672,2690,2692,2695,2703,2741,2746,2755,2765,2779,2789,2862,2875,2885,2896,2903,2911,2926,2935,2941,2948,2951,2955,2981,2988,3011,3038,3046,3100,3117,3132,3140,3151,3168,3180,3196,3201,3210,3213,3216,3220,3228,3242,3250,3259,3263,3269,3275,3278,3299,3348,3352,3359,3404,3420,3425,3456,3461,3486,3503,3510,3538,3541,3544,3548,3568,3571,3594,3606,3609,3619,3626,3665,3685,3717,3738,3742,3745,3748,3751,3755,3789,3792,3795,3799,3804,3819,3822,3825,3829,3848,3865,3870,3873,3878,3883,3895,3899,3918,3926,3937,3941,3953,3961,3967,3980,4002,4005,4013,4033,4042,4049,4060,4067,4092,4116,4139,4153,4165,4171,4186,4210,4221,4246,4256,4260,4266,4271,4279,4295,4314,4318,4333,4339,4345,4359,4367,4382,4391,4394,4403,4407,4437,4497,4548,4558,4561,4581,4584,4604,4608,4618,4624,4651,4656,4672,4684,4702,4706,4743,4791,4848,4882,4916,4931,4939,4944,4961,4967,4974,4983,4990,4993,5002,5008,5012,5023,5043,5047],"Wiley":[259],"Online":[260],"Library":[261],"UseShareable":[266],"LinkUse":[267],"link":[269],"a":[273,288,338,356,372,380,390,493,530,556,700,806,844,852,857,874,955,978,990,1002,1008,1016,1036,1048,1101,1350,1395,1406,1434,1460,1570,1577,1899,1907,1953,1961,1979,2027,2046,2057,2180,2373,2534,2593,2664,2719,2842,2878,3159,3188,3238,3255,3315,3369,3382,3474,3493,3768,3843,3905,3910,4119,4599,4709,4726,4737,4751,4759,4787,4977,4998,5030,5039],"article":[278],"with":[279,419,460,509,760,1058,1138,1157,1199,1245,1620,1682,1725,1752,1856,2017,2035,2107,2171,2190,2287,2493,2561,2565,2735,3227,3289,3301,3836,3946,4841,4976,4997],"your":[280],"friends":[281],"colleagues.":[283],"Learn":[284],"more.Copy":[285],"URL":[286],"Share":[287],"linkShare":[289],"onFacebookTwitterLinkedInRedditWechat":[290],"Abstract":[291],"Conditional":[292,610,727],"cryptanalysis":[294,570,581,612,729,829,1686],"NFSR-based":[296,614,655],"cryptosystems":[297,615,656],"was":[298,616,2438,2537,2740],"first":[299,617,681,1063,1152,1871,2298,2588,2870,3718,3837,4649,4917],"proposed":[300,499,932,1025,2718,4934],"Knellwolf":[302,620],"et":[303,621],"al.":[304,622],"in":[305,332,624,634,651,684,702,750,828,919,933,945,1011,1046,1073,1077,1092,1258,1273,1287,1302,1310,1370,1408,1472,1477,1639,1667,1696,1722,1747,1815,1834,2060,2070,2100,2213,2223,2229,2296,2471,2540,2577,2585,2671,2697,2699,2804,2902,2954,2980,2984,3010,3110,3190,3347,3379,3401,3411,3424,3485,3547,3611,3616,3628,3667,3687,3750,3776,3794,3803,3814,3824,3877,3885,3912,3920,3960,4004,4032,4040,4057,4115,4214,4245,4298,4341,4358,4406,4435,4500,4560,4567,4583,4620,4626,4740,4754,4790,4829,4905,4935,4941,5014,5029],"Asiacrypt":[306,625],"2010":[307],"has":[309,571,730,2533,3241,3700,4476],"been":[310,572,731,825],"successfully":[311,732,826,1188],"used":[312,733,827,2390],"attack":[314,370,586,590,594,599,647,735,842,855,900,986,1091,2228,2263,2708,3202,3205,4340,4499,4994,5003],"reduced":[315,374,473,2439],"variants":[316,415,474,737,1134,1195,1296,1852,2748,3942,4534,4811,4862],"v1.":[319,352,378,455,740,1164,1240,1414,1689,2308,2677,2783,2868],"In":[320,394,601,706,741,794,847,870,909,1117,1205,1313,2041,2179,2372,2396,2770,3031,3179,3222,3236,3247,3601,3763,4091,4158,4530,4631,4701,4742,4815],"paper,":[322,603,911,1315],"we":[323,354,388,604,912,1034,1099,1151,1306,1381,1677,1788,1803,1849,2009,2044,2075,2131,2146,2166,2177,2183,2204,2773,2785,2836,3138,3225,3297,3309,3365,3395,3464,3481,3498,3534,3604,3639,3661,3677,3785,4094,4184,4201,4300,4327,4411,4459,4565,4575,4597,4613,4634,4699,4798,4804,4818,4832],"greatly":[324],"improve":[325,914],"following":[334,921,2118,3487,3849,4187,4257,4272],"four":[335,786,922,2557,4089,4110],"aspects.":[336,923],"First,":[337,924],"new":[339,357,875,956,991,1037,2843,3160,3511,3927,4099,4883,4923],"engine":[341,929,958,2595,2792,2798,2845,3119,3162,3513,3929,4885],"is":[342,385,425,486,492,516,657,748,994,1055,1166,1214,1224,1250,1271,1344,1360,1470,1569,1576,1588,1594,1603,1615,1637,1836,1847,1874,1881,1940,1969,1986,2007,2023,2064,2161,2510,2590,2603,2632,2661,2760,2802,2893,2908,2915,2930,3262,3318,3575,3598,3647,3670,3724,3727,3810,3854,3889,3898,3964,3977,3989,3998,4054,4102,4138,4152,4162,4269,4344,4374,4442,4454,4621,4628,4678,4693,4712,4718,4722,4755,4946,4987,5050],"derived":[343],"correctly":[345,941,2521,2849],"track":[346,960],"trails":[349,940,962,1808,2642,3170,3518],"Second,":[353,967],"propose":[355,389,1035,2663],"difference-searching":[358,400,992,1122,3177,4895],"strategy":[359,384,401,405,993,1026,1039,1103,1123,1126,3178,3484,4029,4101,4336,4475,4514,4529,4953],"which":[360,505,560,716,747,1004,1040,2522,2631,2649,2848,3165,3317,3740,3957,4020,4462,4587,4654],"serves":[361],"find":[363,4566,4650,4782],"suitable":[364,3319,3330,4890],"differences":[365,661,1028,2300,2938,3141,3233,3374,3389,3400,3542,3723,3746,3790,3813,3820,3871,3935,4685,4891],"given":[373,979,1017,1471,3383,3410,4978],"variant":[375,756,1019,1877,4121],"Third,":[379],"highly":[381,510,1044,4478],"IV-saving":[382,4104],"condition-imposing":[383,404,1038,1125,4028,4100,4335,4924],"presented.":[386],"Last,":[387],"further":[391,1109,4579,4602,4955],"bias-increasing":[392,1102,4528,4952],"strategy.":[393,4896,4925],"particular,":[395,1118],"improvements":[397,1120,1277,2777,4825],"are":[406,467,538,561,1127,1256,1284,1300,1521,1565,1652,1661,1729,1760,1779,1818,2094,2350,2358,2367,2422,2459,2467,2519,2529,2581,2650,2958,3000,3108,3448,3563,3636,3695,3713,3958,4078,4134,4689],"crucial":[407,1128,2959],"mount":[409,1130,4338],"than":[421,1140,1201,2163,3392,4088,4109,4311,4417,4843,4989],"106":[422,1141,1202,4844],"rounds.":[423,1143,1204,4090],"It":[424,515,1054,1165,1223,2022,2509,2639,2801,3342,3963,4053,4071,4274,4692],"shown":[426,1056,1167,1226,3965],"that":[427,672,691,834,851,926,1057,1168,1227,1846,1951,2006,2026,2137,2339,2357,2512,2705,2728,2807,2977,3311,3314,3346,3431,3554,3615,3641,3654,3672,3679,3682,3767,3966,3994,4031,4059,4075,4097,4278,4377,4547,4697,4821,5019],"improved":[429,1155,1184,1207,1229,1291,2790,4858],"could":[433,445,864,888,935,1173,1186,1231,2555,2730,3192,4062,4106,4145],"retrieve":[434,446,865,890,1189,1217,1232,4521,4834],"31":[435,1218],"distinct":[436,448,1219],"secret":[437,449,527,713,771,787,867,892,1170,1190,1220,1234,1426,2276,2364,2393,2447,2456,2516,2544,2558,4142,4242,4321,4360,4427,4523,4835,5026],"key":[438,450,528,598,714,772,788,868,893,1171,1191,1221,1235,1427,2277,2365,2394,2448,2457,2517,2545,2559,4143,4243,4322,4361,4428,4524,4836,5027],"expressions":[439,451,715,773,789,1172,1192,1236,2458,2518,2546,2560,4144,4319,4429,4837,5028],"107-round":[441,902,1210],"15":[447,1169,1233],"110-round":[453,1238],"Both":[456,1241,3277],"succeed":[459,1244,4996],"constant":[461,1246,4999],"probabilities.":[462,1247],"Thus":[463,4731],"far,":[464],"results":[466,3992],"best":[469,2742,3264],"known":[470,2025],"as":[478,480,578,839,905,1252,1590,1596,1796,1798,1820,1838,2684,2752,2754,2987,3478,3705,3707,3759,3761,3773,3779,3890,3892,3915,4176,4178,4690],"far":[479,2753,4464],"number":[482,1400,2051,2113,2756,3251,3743,3867,3896,3969,3982,4014,4140,4166,4962,4968],"rounds":[484,683,763,944,1065,1868,2326,2758,2818,3034,3052,3067,3083,3148,3253,3271,3839,3949,4111,4262,4486,4919],"attacked":[485,2759],"concerned.":[487,2761],"Introduction":[489],"bit":[494,526,532,543,550,1070,1425,1436,1453,1457,1693,1794,1873,3388,3399,4289],"oriented":[495],"synchronous":[496],"stream":[497],"cipher":[498,1444,1602],"Hell,":[501],"Johansson":[502],"Meier,":[504],"targets":[506],"hardware":[507],"environments":[508],"restricted":[511],"resources,":[512],"see":[513,1367,2242],"[1].":[514],"one":[517,2729,2823,4218,4286,4371,4470],"eSTREAM":[519],"hardware-oriented":[520],"finalists":[521],"uses":[523],"an":[524,541,548,743,906,998,1423,1451,1455,2685,3701,4349,4665,4679],"80":[525,542,549,1424,1452,1456],"64":[531,1435,1547,2995],"initial":[533,1714],"value":[534,1958,2125,3015,3039],"(IV).":[535],"Its":[536],"designs":[537],"based":[539,3149,4822],"non-linear":[544,1461,1579,2904,2952,2978,3106],"feedback":[545,552,1861],"shift":[546,553],"register,":[547],"linear":[551,1572,2889,2942,3422,3757,3801,3831,3875,4667,4710,4728,4760],"register":[554],"5-input":[557],"filter":[558],"function,":[559],"very":[562],"compact.":[563],"During":[564],"past":[566],"few":[567,682,3774,4918,5040],"years,":[568],"extensive":[569],"done":[573],"such":[577,4568,4758],"[2,":[582,2243],"3],":[583],"fault":[585],"[4-6],":[587],"dynamic":[588,840,853,984],"cube":[589,841,854,859,985],"[7],":[591,848,3764],"near":[592],"collision":[593],"[8]":[595],"related":[597],"[9].":[600],"focus":[605],"cryptanalysis.":[609],"introduced":[618,633,818,1257,4828],"[2]":[623,1371,2700],"2010.":[626],"Inspired":[627],"message":[630],"modification":[631],"techniques":[632],"[10]":[635],"hash":[637],"function":[638,976,1573,1581,1587,1614,1909,1967,2030,2599,2880,2956,2982,3012,3023,3047,3406,3427,3457,3806,3880,4267,4451,4682],"cryptanalysis,":[639],"basic":[641],"idea":[642,884,971],"(CDA":[648],"short":[650],"paper)":[653],"trace":[659],"round":[662,664,980,1499,1735,2617,2989,3361,3384,4050,4068,4445],"identify":[666],"conditions":[667,694,710,2273,2318,2338,2356,2379,2387,2401,2406,2415,2528,3620,4128,4133,4192,4641,4909],"internal":[670,1654,1663,2682,4226,4315,4350,4414,4652,4761,4765,4775],"variables":[671,1655,3423,3546,3749,3758,3793,3802,3823,3876,3884,4227,4316,4323,4415,4688,4776],"control":[673,2312,3502,4517],"propagations":[675,1066,2315,3841,4047,4065,4084,4482,4519,4540,4921],"difference":[678,1003,1014,1071,1411,1694,1795,2630,2674,2876,2886,2897,2912,2927,3214,3240,3256,3316,3572,3595,3739,3770,3845,3906,4586,4638,4658,4707,4753,4903],"through":[679,4255],"initialisation":[685,762,947,1142,1203,1599,1632,1674,1858,2864,3948,4261,4845],"process.":[686,948],"The":[687,1290,1338,1443,1519,1585,1631,2062,2259,2281,2499,2587,2598,2658,3204,4449,4646,4855],"attackers":[688,719,2461,2554,4043],"derive":[689,954,2841,3158,3817,4598],"IVs":[690,777,1403,2053,2151,4404,4421,4970],"satisfy":[692,2116,3847],"allow":[696],"them":[697,4329],"detect":[699,1405,2056,2104,2153,2168,4001,4557,4973],"bias":[701,1010,1112,1407,1832,2015,2033,2058,2106,2170,2188,2576,2696,3189,3495,3504,3610,3666,3703,3911,3919,4559,4582,4605,4625,4739,4789,4940,4945,4975,5044],"output":[704,975,1013,1410,1462,1586,1613,1777,1864,2299,2673,3405,3426,3805,3879,4006,4562,4585,4792],"difference.":[705,1800,4563,4793],"some":[707,943,1679,2817,3005,3027,3955,4225,4783],"cases,":[708,4569],"also":[711,897,1187,1225,1882,3454,3787,4055],"involve":[712],"enable":[717],"recover":[721,2392,2556],"values":[723,2089,2346,2452,2470,2506,5024],"these":[725,814,4413],"expressions.":[726,869,1222,2395,4525],"round-reduced":[736,1018,1295,1851,2747,4120,4533,4810,4861],"[2],":[742],"extended":[744],"presented":[749,873,1301,1638],"[11],":[751,4041,4436],"CDA":[753,780,835,886,1156,1185,1230,2715,3181,3300,3321,3332,4022,4035,4117,4744,4827],"97":[761],"(97-round":[764],"short)":[768],"retrieved":[769,785,1175,4147],"five":[770,2412,2455,2484,2515,2525,2543,3838,4870],"using":[774,790,881,1176,4922],"227":[775,2494],"chosen":[776,792,1180,2374,2497,2569],"104-round":[782,1162,2255,2306,2550,3286,4037],"235":[791,2566],"IVs.":[793,1053,1181,2080,2498,2570,4157],"[12],":[795],"revisited":[798],"Knellwolf's":[799],"provided":[805,1272],"theoretical":[807,2221,2665,4932],"framework":[808,2260,2666,2679,4856,4933],"prove":[810],"correctness":[812],"attacks.":[815,2073],"Cube":[816],"attacks,":[817],"Dinur":[820],"Shamir":[822],"[13],":[823],"[14,":[830],"15],":[831],"note":[833],"can":[836,2167,2264,2380,2388,3166,3343,3578,3730,3859,4072,4082,4275,4576,4833,4866],"be":[837,1043,1174,1898,1906,1917,1932,2265,2381,2389,2611,2635,2856,2970,3193,3329,3344,3579,3650,3731,3860,4017,4073,4146,4229,4250,4276,4423,4431,4553,4664,4768,4867],"described":[838,1286],"over":[843,856,1359],"single-dimensioned":[845,858],"cube.":[846],"Banik":[849,3765],"showed":[850,2727],"105-round":[861],"six":[866],"[3],":[871],"Sarkar":[872,2717],"distinguisher":[876,2720],"106-round":[878,2710,2722,2732,3306],"similar":[883],"but":[887],"not":[889,936,2923,3328,3357,4045,4063,4086,4554],"any":[891,1609,2888,2899,4616],"expression.":[894],"This":[895,1248,1876,2536,2678,2739,3312,3680,3809,5035],"paper":[896,1249,1309],"left":[898],"open":[907],"problem.":[908],"shall":[913],"CDAs":[915,1107,1131,1208,1267,1280,1292,2199,2209,2237,2249,2766,2780,3279,4077,4531,4808,4859],"recall":[925],"\u0394\u03d5":[930,2596,2601,2793,2799,2808,2838,2846,2961,3120,3163,3930,4886],"\u2212GrainKSA":[931,2602,2809,2839,2962,3121],"[12]":[934,2224,2579,4936],"determine":[937,2605,2874,2964,3167,5022],"at":[942,1498,1978,2001,2144,2325,2616,3146,3565,4444,4485,4669],"We":[949,996,1690,2409,2869,2975,3472,3735,3924,4252,5010],"remedy":[950,2833],"problem":[952,3229],"correctly.":[966,3174],"inspired":[968],"simplifying":[973],"adopted":[981],"v1,":[989,1212,2240,2552,2625,3186,3308,3430,4124,4537,4749,4880],"derived.":[995],"reveal":[997],"essential":[999,3900],"characteristic":[1000],"will":[1005,3907,4016,4095,4422,4430,4541,4552,4734,4819,4995],"lead":[1006,3908,4735],"significant":[1009,3377],"chooses":[1027],"judging":[1030],"characteristic.":[1032],"Next,":[1033,1676],"proves":[1041],"efficient":[1045],"finding":[1047],"large":[1049,1948,1955],"sample":[1050],"effective":[1052,2158,2435,3197,4549,4984],"strategy,":[1060,3351],"preventing":[1061,1114,4538,4572,4607],"three":[1064,1294,1447,2268,3545],"inserted":[1072,1695],"37th":[1075],"position":[1076,1700],"IV":[1078,1086,1096,1437,1702,2159,2323,2342,2361,2375,2436,3008,3198,4194,4205,4211,4239,4288,4325,4364,4397,4466,4505,4510,4545,4550,4591,4644,4912,4985],"bits":[1079,1087,1648,1778,2324,2343,2362,2366,3009,4206,4212,4240,4244,4362,4365,4467,4546,4913],"(denoted":[1080],"e37)":[1082],"only":[1083,3396,3499,4081,4301],"consumes":[1084,4463,4589],"17":[1085,4509],"while":[1088,2355,4168,4847],"previous":[1090,1106,1266,2208,2236,3349,4034,4076,4334,4498,4849],"[11]":[1093,2214,2258,2541,4501,5015],"consumed":[1094,4424,4503],"32":[1095,4504],"bits.":[1097,4195,4511,4592,4645],"Finally,":[1098,1305],"add":[1100],"increase":[1110,4580,4603],"after":[1113,1866,4606],"propagations.":[1116,3221,4113,4610],"To":[1144,2311,2832,3491,3833,4180,4231,4480],"show":[1145,2871,3993,4096,4820],"effects":[1147,3217],"improvements,":[1150],"apply":[1153],"respect":[1158,1683,1726,2288,3248,3290,3302],"e37":[1160,2290,3261,3292,3304,3355,4484],"239":[1177],"pairs":[1178,2078,2149,2495,2567],"Besides,":[1182],"it":[1213,3267,4461,4660],"able":[1215],"organised":[1251],"follows.":[1253],"Some":[1254],"preliminaries":[1255],"Section":[1259,1274,1288,1303,1311,1368,2101,4830],"2.":[1260,1337,1641],"A":[1261,1464,1965],"brief":[1262],"3.":[1275],"Our":[1276],"against":[1281,2767,2781],"detailedly":[1285,2774],"4.":[1289],"5.":[1304,2432],"conclude":[1307],"6.":[1312],"operations":[1317],"'+'":[1318],"'\u2212'":[1320],"denote":[1321,1489,1691,1793,1804,2083,2410,3099],"ordinary":[1323],"integer":[1324,1352],"addition":[1325,1335],"subtraction,":[1327],"respectively,":[1328,1566,1774],"whereas":[1329,4507],"operation":[1331],"''":[1332],"denotes":[1333,2628],"modulo":[1336],"finite":[1339],"field":[1340],"two":[1342,2582,3488,4188],"elements":[1343],"denoted":[1345,1361,1730,1761,1780],",":[1347,2417,4299],"positive":[1351,3494,4738,4788],"n":[1353,1355,3868,3897,3916,3970,3983,3995,4015],"-dimensional":[1356],"vector":[1357,1799,3475],"space":[1358,2160,2437,4398,4551,4986],".":[1363,1903,2085,3643,4369],"2":[1364],"Preliminaries":[1365],"Please":[1366],"2.2":[1369,1890],"definition":[1374],"derivatives":[1376],"Boolean":[1378,1392,1580,1894,1908,1966,2029,2423,2879,4681],"functions.":[1379,3030],"Here":[1380,2203],"briefly":[1382,2205],"describe":[1383,2775],"cipher,":[1386],"introduce":[1388,1678,2045],"frequency":[1389,1974,1997,2098],"test":[1390,1892,1975,1998,2016,2034,2099,2189,5045],"functions":[1393,1558,1895,2424,3753,3797,3827,3888,4223,4248],"method":[1396,2040,2047,2063,3370,4600,5013],"estimate":[1398,2049],"needed":[1402,2054,4964,4971],"2.1":[1415],"Description":[1416],"accepts":[1422],"K":[1428],"=":[1429,1439,1503,1512,1525,1534,1544,2328,2331,2335,2427,2443,3623,3657,3675,3973,3986,4440,4447,4488,4491,4495,4801],"(k0,":[1430],"\u2026,":[1431,1441,1507,1516,1915,1926],"k79)":[1432],"X":[1438],"(x0,":[1440],"x63).":[1442],"consists":[1445],"main":[1448],"building":[1449],"blocks:":[1450],"LFSR,":[1454,2648],"NFSR":[1458,1494,1564,1718,1743,1811,2645],"function.":[1463],"general":[1465],"overview":[1466],"design":[1469],"Fig.":[1473,1475,1640,1665],"1.":[1474,2638],"1Open":[1476],"figure":[1478,1668],"viewerPowerPoint":[1479,1669],"Overview":[1480,1670],"v1's":[1483,1673],"keystream":[1484,1872],"generation":[1485],"algorithm":[1486,1675,2491],"Let":[1487,1896,1904,1931,2081],"us":[1488,2082,3098],"state":[1491],"LFSR":[1497,1561,1626,1721,1746,1814],"t":[1500,1530,1539,1549,1553,1645,1736,1828,2327,2330,2334,2618,2819,2990,2997,3035,3055,3070,3086,3416,4263,4379,4446,4487,4490,4494],"Bt":[1502,1658],"(bt,":[1504],"bt":[1505,1508,1524,1763,4355],"+1,":[1506,1515,3434],"+79)":[1509],"St":[1511,1660],"(st,":[1513],"st":[1514,1517,1533,1543,1765,2993,3041,3058,3073,3089,4290,4305,4352],"+79).":[1518],"registers":[1520],"initialised":[1522,3002],"kt":[1526],"0":[1528,1537,1643,1706,2347,2353,2378,2400,2636,3624,3651,3855,4127,4441,4778],"\u2264":[1529,1531,1538,1540,1548,1550,1644,1646,1707,1709,2619,2996,2998,3036,3054,3056,3069,3071,3085,3087,3584,3996,4264],"79,":[1532],"xt":[1535],"63":[1541],"79.":[1551],"For":[1552,1642,1801,1827,2231,2479,2549,4259,4433,4876,4901],"\u2265":[1554,1737,1825,1829,2820,3417,3470,3532,4011],"0,":[1555,1738,1830,2612,2654,2821,2857,2971,3660,4802,4950],"update":[1557,3752,3796,3826,3887,4222,4247,4450],"where":[1567,1705,1823,1984,2418,2626,2994,3338,3414,3642],"f":[1568,1905,1921,1939,1968,1992,2011,2881,2892,2907,2914,2929],"6-variable":[1571],"g":[1575],"13-variable":[1578],"degree":[1583],"six.":[1584],"taken":[1589],"(1)where":[1591],"h":[1593,2957,2983,3013,3024,3048,3063,3078,3094,3102,4268],"defined":[1595,1819,1837],"(2)During":[1597],"process,":[1600],"clocked":[1604],"160":[1605],"times":[1606],"without":[1607],"producing":[1608],"keystream.":[1610],"Instead":[1611,4455],"fed":[1616],"back":[1617],"XORed":[1619],"input,":[1622],"both":[1623,2293,3209,4238],"NFSR.":[1630,3276],"process":[1633,2865],"159,":[1647],"s80+t":[1649],"b80+t":[1651],"called":[1653,1662,1883,2351,2368],"vectors":[1657,2651],"states.":[1664],"2Open":[1666],"useful":[1680],"notation":[1681],"i":[1698,1708,3526],"th":[1699],"ei":[1704,1728],"63.":[1710],"Then":[1711,1944,2086,4136],"corresponding":[1713,2500],"states":[1715],"respectively.":[1733,1786],"At":[1734],"updates":[1740],"ciphers":[1750],"loaded":[1751,2492],"B0,":[1753],"S0":[1754],"B":[1756],"\u20320,":[1757],"S":[1758,2091],"\u20320":[1759],"+80,":[1764,1770,1773],"+80":[1766,4353,4356],"b":[1768],"\u2032t":[1769,1772],"s":[1771],"zt":[1782],"z":[1784],"\u2032t,":[1785],"Furthermore,":[1787,4512,4720],"use":[1789,4951,5011],"symbol":[1790],"'\u0394'":[1791],"well":[1797,2024],"example,":[1802,4434,4704],"respectively":[1822],"r":[1824,1857,1867,1884,2620,2622,3183,3469,3520,3531,3583,3972,3985,4010,4746,4877],"0.":[1826,2478,3418,3471,4230,4308],"\u03b5":[1833,2059],"\u0394zt":[1835,3130],"deviation":[1840],"its":[1842,2123,3588,4687],"distribution":[1843,1990],"from":[1844,3450,3455,3782,3818],"(1/2),":[1845,3676],"If":[1848,1991,2156,3644,4943,4982],"consider":[1850,3397],"rounds,":[1859,3020,4846],"stops":[1865],"zr.":[1875],"-round":[1885,2623,3184,3324,3335,3521,4747,4878],"short.":[1889],"Frequency":[1891],"D":[1897,1911,1977,2000],"non-empty":[1900],"subspace":[1901],"c1,":[1913],"c2,":[1914],"cN":[1916],"outputs":[1919,2640],"set":[1924],"{y1,":[1925],"yN":[1927],"}":[1928],"\u2286":[1929],"D.":[1930,1943],"sum":[1934,2504,2936,3834,4172],"outputs.":[1937],"Suppose":[1938,2074,4114],"random":[1941,2028],"law":[1946],"numbers":[1949],"says":[1950],"sufficiently":[1954],"N,":[1956],"approximately":[1959],"follows":[1960],"standard":[1962,1988],"normal":[1963,1989],"distribution.":[1964],"said":[1970],"pass":[1972,1995,5042],"significance":[1980,2003,2019,2109,2173,2191,4979],"level":[1981,2004,2020,2110,2174,2192,4980],"\u03b1":[1982,2193],"if":[1983,2194,2513,2828,2884,2919,3187,3664,3684,4410,4615,4705,4750,4797,5038],"\u03a6":[1985],"fails":[1993],"\u03b1,":[2005,2111],"then":[2008,2165,2910,2925,3200,4623,4716,4763,4803,4992],"say":[2010,2184,4714],"(x)":[2012],"passes":[2013,2031,2186],"\u03b1.":[2021,4981],"probability":[2036,2562,2737],"2\u03b1.":[2037],"2.3":[2038],"Estimation":[2039],"section,":[2043,2772,3224,4817],"\u0394zr.":[2061,4942],"easy":[2065,4694],"understand":[2067],"important":[2069],"later":[2072],"need":[2076,2147,2462,3366,3500,4302],"N\u03b1":[2077,2136],"expected":[2088,2124,2511],"y":[2093,2114,2121],"According":[2095,2946,3134,4593],"2.2,":[2102],"must":[2115],"inequality:":[2119],"(3)Substitute":[2120],"E":[2126],"[y]":[2127],"into":[2128,2267,3258,3274,3362,3807,4317,4869],"(3)":[2129,2195],"obtain":[2132,3310,3678,3951,4232,4696],"estimation":[2134],"(4)where":[2138],"u\u03b1":[2139],"satisfies":[2140],"From":[2141,4611],"inequality":[2142],"(4),":[2143],"least":[2145],"(2\u03b5)\u22122":[2148],"bias.":[2155,2535],"larger":[2162,4988],"N\u03b1,":[2164],"\u03b1;":[2175],"otherwise,":[2176,4770,5001],"fail.":[2178],"specific":[2181,3360],"attack,":[2182],"\u0394zr":[2185,3191,3380,3913,3921,4627],"holds.":[2196],"3":[2197],"Previous":[2198],"(an":[2215],"expanded":[2216],"[2]),":[2219],"proof":[2222,2573],"distinguishing":[2227],"[3].":[2230],"details":[2233],"about":[2234,2563],"please":[2241],"3,":[2244,2430],"7,":[2245],"12].":[2247],"3.1":[2248],"97-round":[2251,2302,2488,3281],"divided":[2266,4868],"steps:":[2269,4871],"choosing":[2270,3231],"difference,":[2271],"imposing":[2272,4191,4216,4640],"recovering":[2275],"expressions:":[2278,2449],"Choosing":[2279],"difference:":[2280],"authors":[2282],"chose":[2283],"first-order":[2285],"derivative":[2286],"analyse":[2292],"biases":[2295,2670,3378,3539,3627,3686,4003,4619],"Imposing":[2309,4899],"conditions:":[2310,4900],"e37,":[2317],"were":[2319,2407,2547],"imposed":[2320,4443],"certain":[2322,2341,2931,3576,3648,3714,3728,4643,4911],"12,":[2329,4489],"34":[2332,4492],"40.":[2336,4052],"Simple":[2337],"assign":[2340],"fixed":[2345],"or":[2348,2614,2637,2656,2813,2859,2895,2973,3577,3652,3659,3729,3856,3858,4354,4779,4948],"Type":[2352,2369,2377,2385,2399,2404,2413,2526,4126,4131,4472],"conditions,":[2354,4217,4234],"relations":[2359],"between":[2360],"conditions.":[2371],"scenario,":[2376],"easily":[2382,3580,3732,3861],"satisfied":[2383],"total,":[2397],"27":[2398],"5":[2403,4806],"imposed.":[2408,4135],"fij,1":[2419],"fij,2":[2421],"j":[2426],"1,":[2428,3004,3653,4907],"2,":[2429],"4,":[2431,4831],"Therefore,":[2433,3364,3716,4698],"{0,":[2441,2444],"1}64\u22121\u221232":[2442],"1}31.":[2445],"Recovering":[2446],"Since":[2450,2992,3105,3386,3419],"unknown,":[2460],"guess":[2464,2481,5049],"them.":[2465],"There":[2466,2580],"25":[2468,2474],"possible":[2469],"total.":[2472],"Set":[2473],"associated":[2475],"counters":[2476],"each":[2480,3451,4902],"values,":[2485],"run":[2486,3925,4881],"counter":[2501,2532],"records":[2502],"\u0394z97.":[2508],"guessed":[2520],"means":[2523],"satisfied,":[2530],"experimentally":[2538],"verified":[2539],"recovered.":[2548,4432],"50%":[2564],"3.2":[2571],"Theoretical":[2572],"\u0394z97":[2578,2698],"major":[2583],"contributions":[2584],"[12].":[2586],"contribution":[2589,2660],"devise":[2592,3368],"\u2212GrainKSA.":[2597],"\u0394zt,":[2606,2811,2851,2965,3142],"\u0394bt":[2607,2812,2852,2966,3143],"\u0394st":[2609,2814,2854,2968,3145],"'2'":[2615,2627,2860,3775],"uncertain":[2629,2894,2916,3599,3812],"probabilistic":[2633],"items":[2653],"'2'.":[2657,2974],"second":[2659],"compute":[2668,4938],"treats":[2680],"every":[2681],"variable":[2683,2900,4351,4653,4668,4766],"independent":[2686,3449,4666],"balanced":[2687],"variable.":[2688],"Using":[2689,2714],"framework,":[2691],"computed":[2694],"obtained":[2702,4904],"result":[2704,2744],"3.3":[2706],"Distinguishing":[2707],"[3]":[2713],"method,":[2716],"experiments":[2726],"distinguish":[2731],"success":[2736],"63%.":[2738],"attacking":[2743],"4":[2762],"Improvements":[2763],"Now":[2784,3480],"begin":[2786],"introducing":[2788],"\u2212Grain.":[2794],"4.1":[2795],"\u2212Grain":[2800,2847,3164,3514,3931,4887],"mentioned":[2803,4056],"[7,":[2805,4342],"12]":[2806],"calculated":[2810],"incorrectly":[2815],"always":[2824,4588],"needs":[2825],"situation":[2830,2920],"happens.":[2831],"problem,":[2835],"modify":[2837,4635],"determines":[2850],"during":[2861],"whole":[2863],"how":[2872],":":[2882],"(i)":[2883,2921,3537,3851],"term":[2890,4711,4729],"appearing":[2901,4213,4405],"terms":[2905,2943,2953,2979,3107,4236,4281,4297],"non-zero,":[2909],"(ii)":[2918,3570,3864],"does":[2922],"happen,":[2924],"equals":[2933],"all":[2940,3001,3131,3525,3637,3696,3952,4209,4402],"f.":[2945],"above":[2949,3938,4703],"rules,":[2950],"observe":[2976,3535],"(2)":[2985],"change":[2986],"proceeds.":[2991],"79":[2999],"taps":[3006],"take":[3014,3358,3788],"several":[3018],"continuous":[3019],"thus":[3022,3157],"decays":[3025,3049,3064,3079,3095],"other":[3028,3452,4392,4774],"simpler":[3029],"specific,":[3032,4159],"15,":[3037,4265],"+64":[3042,3559,3632,3691],"takes":[3043,3060,3075,3091,3268],"h1for":[3051],"18":[3053],"33,":[3057],"+46":[3059,4291,4306],"h2for":[3066],"39":[3068],"54,":[3072],"+25":[3074,3597,3613,3646,3669,3712,3726,3853],"h3and":[3081],"61":[3084],"76,":[3088],"+3":[3090,3574,3622,3709],"h4Let":[3097],"original":[3101],"h0.":[3104],"different":[3109,3147,3152],"h0,":[3111],"h1,":[3112],"h2,":[3113],"h3":[3114],"h4,":[3116],"may":[3122,3327],"make":[3123],"mistakes":[3124],"taking":[3126],"h0":[3127],"calculate":[3129,3139,3640],"time.":[3133,4673],"observation,":[3137],"forms":[3153],"h,":[3155,3458,3553],"4.2":[3175],"Proposed":[3176,4027],"detected":[3194],"within":[3195],"space,":[3199],"succeeds.":[3203],"succeeds":[3206],"due":[3207,3586,4724],"choice":[3211,3265,3353],"controlling":[3219],"deal":[3226],"'good'":[3232,3239,3769,3844],"CDAs.":[3235,3402],"general,":[3237],"property":[3243],"slow":[3245],"propagation.":[3246],"before":[3254,3272],"propagates":[3257],"NFSR,":[3260],"because":[3266,3811],"maximum":[3270],"propagating":[3273],"succeeded":[3293],"[2].":[3294],"However,":[3295,3663,3781,4008,4564],"when":[3296,3530,3582,4009,4048,4066,4190,4378],"implement":[3298],"reveals":[3313],"r1":[3323,3339],"r2":[3334],"\u2260":[3340],"r2.":[3341],"seen":[3345,4074,4277],"difference-choosing":[3350],"did":[3356,4044],"consideration.":[3363,3808],"search":[3372,3933,4889],"leading":[3375,4785],"r.":[3385],"propagate":[3390],"slower":[3391],"multi-bit":[3393],"differences,":[3394],"Recall":[3403,4030],"(1).":[3412],"Denote":[3413],"seven":[3421,3756,3800,3830,3874],"is,":[3432,3555,3655,3673,5020],"br":[3433,3435,3437,3439,3441,3443,3446],"+2,":[3436],"+4,":[3438],"+10,":[3440],"+31,":[3442],"+43":[3444],"+56,":[3447],"according":[3459,4892],"piling-up":[3462],"lemma,":[3463],"(5)where":[3466],"define":[3473],"\u0394":[3476,3777,3815],"Or":[3477,3778,3816],"follows:":[3479,4691],"explain":[3482],"points:":[3489],"i.":[3490],"get":[3492,3516,4469,4805],"\u0394hr,":[3497],"\u0394sr":[3506,3556,3558,3573,3596,3612,3621,3629,3631,3645,3668,3688,3690,3708,3711,3725,3852],"+25.":[3507],"When":[3508],"running":[3509],"\u2208":[3527],"[0,":[3528],"63]":[3529],"105,":[3533],"that:":[3536],"largest":[3549],"tap":[3550,3590],"positions":[3551],"+46,":[3557,3630,3689],"\u0394br":[3561,3634,3693],"+63":[3562,3635,3694],"zeros":[3564],"most":[3566,4670],"time;":[3569],"nullified":[3581,3862],"111":[3585],"small":[3589,3760,3891,4177,4947],"position;":[3591],"(iii)":[3593],"sometimes.":[3600],"situation,":[3603,4633],"examine":[3605],"effect":[3607],"\u0394hr.":[3617],"With":[3618],"zeros,":[3638,3697],"p":[3656,3674],"zero,":[3671,4622],"implies":[3681],"even":[3683,4949],"\u0394hr":[3698],"still":[3699],"obvious":[3702],"(1/32)":[3704],"long":[3706],"differences.":[3715,4007],"principle":[3719,5036],"choose":[3721,3737,4577],"good":[3722],"nullified.":[3733],"ii.":[3734],"should":[3736,3771,3786,3846,4249,4648,4767],"induces":[3741],"possible.":[3762,3780,3893,4179],"remarked":[3766],"induce":[3772],"observations,":[3784],"variables.":[3832],"up,":[3835],"prevented,":[3842],"characteristics:":[3850],"total":[3866,4154],"their":[3886,4203],"Actually,":[3894],"factor":[3901],"judge":[3903],"whether":[3904],"since":[3914],"increases,":[3917],"decreases":[3922],"drastically.":[3923],"satisfying":[3936],"criterion":[3939],"104\u2013111":[3947],"candidates":[3954,5041],"listed":[3959],"Appendix.":[3962],"minimal":[3968,3981],"106,":[3974],"107,":[3975],"108":[3976],"11":[3978],"109,":[3987],"110":[3988],"12.":[3990],"Attacking":[3991],"12":[3997],"acceptable":[3999],"111,":[4012],"no":[4018],"<14":[4019],"makes":[4021],"hard":[4023],"succeed.":[4025],"4.3":[4026],"prevent":[4046,4064,4083,4107,4481,4915],"exceeds":[4051,4069],"[7]":[4058],"attacker":[4061,4647],"45.":[4070],"IV-consuming":[4079],"following,":[4093],"n1":[4125],"n2":[4130,4137,4167],"(n1":[4149,4173],"+":[4150,4174],"n2)":[4151,4175],"consumption":[4155,4395],"goal":[4161],"maximise":[4164],"keep":[4170],"achieve":[4181],"goal,":[4183],"emphasise":[4185],"principles":[4189],"Principle":[4196,4309],"1.To":[4197],"eliminate":[4198,4294],"mixed":[4199,4235,4280,4296,4408],"terms,":[4200],"nullify":[4202,4328,4412,4460],"common":[4204,4287],"instead":[4207,4570],"them.When":[4215],"sometimes":[4219],"imposes":[4220],"key-independent":[4233],"including":[4237],"eliminated.":[4251],"illustrate":[4253],"example.":[4258],"form:":[4273],"(in":[4282],"bold":[4283],"format)":[4284],"include":[4285],"impose":[4304,4773,4799,4908],"2.Rather":[4310],"directly":[4312],"expand":[4313,4418],"variables,":[4326],"instead.A":[4330],"requirement":[4331],"11]":[4343],"ability":[4346],"express":[4348],"symbolically":[4357],"form":[4368],"On":[4370,4390],"hand,":[4372,4393],"so":[4375,4388,4543],"memory-consuming":[4376],">":[4380],"45,":[4381],"computation":[4383],"resource":[4384],"failed":[4385,4851],"do":[4387,4853],"[7].":[4389],"booms":[4399],"nullifying":[4401,4732],"terms.However,":[4409],"rather":[4416],"them,":[4419],"less":[4420,4465,4590],"condition":[4438],"s98":[4439,4453],"34.":[4448],"expanding":[4457],"b81,":[4458],"condition.Our":[4474],"proved":[4477],"effective.":[4479],"40,":[4496],"totally":[4502],"bits,":[4506],"ours":[4508],"helps":[4515],"4.4":[4526],"Further":[4527],"consume":[4542],"many":[4544],"enough":[4555],"propagations,":[4574],"idea,":[4596],"(5)":[4612],"know":[4614],"definitely":[4629],"zero.":[4630],"non-biased":[4637,4657,4723,4752],"causes":[4655],"turns":[4661],"out":[4662],"Toy":[4674,4794],"example:":[4675,4795],"(1/2)":[4676],"suppose":[4677],"8-variable":[4680],"non-biased,":[4713],"\u0394x5,":[4715],"\u0394f":[4717],"non-biased.":[4719],"\u0394x5":[4721],"balanced-distributed":[4727],"x7.":[4730],"x7":[4733,4800],"\u0394x5.":[4741],"caused":[4756],"variable,":[4762],"nullified;":[4769],"try":[4771],"modifications":[4784],"(2/2)":[4796],"so.":[4854],"Step":[4872,4897,4926,4958,5005],"1:":[4873],"Searching":[4874],"differences:":[4875],"2:":[4898],"step":[4906],"3:":[4927],"Calculating":[4928],"bias:":[4929],"raise":[4956],"it.":[4957],"4:":[4959],"Estimating":[4960],"IVs:":[4965],"Estimate":[4966],"estimation,":[4991],"probability;":[5000],"fails.":[5004],"5:":[5006],"Verifying":[5007],"attack:":[5009],"verify":[5017],"CDAs,":[5018],"Mastermind":[5031],"fashion":[5032],"[see":[5033],"http://www.en.wikipedia.org/wiki/Mastermind_(board_game)].":[5034],"works":[5037],"correct":[5048],"among":[5051]},"cited_by_api_url":"https://api.openalex.org/works?filter=cites:W2298415206","counts_by_year":[{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":2},{"year":2020,"cited_by_count":1},{"year":2019,"cited_by_count":1},{"year":2018,"cited_by_count":5},{"year":2017,"cited_by_count":1}],"updated_date":"2024-11-18T06:02:54.352131","created_date":"2016-06-24"}