[PDF] Top 20 A new method for Searching Optimal Differential and Linear Trails in ARX Ciphers

... are linear. By combining these simple operations, lots of ARX algorithms have been proposed since ...block ciphers FEAL [38], TEA [42], XTEA [32], RC5 [35], HIGHT [21], SPECK [5], LEA [20] and SPARX ... See full document

... a method to construct the space of the valid input-output difference tuples of certain differential probability ...the differential probability weight monotonously, which can exclude the search space ... See full document

... efficient method for solving optimal control problems of the linear differential systems with inequality constraint is ...using new adjustment of hat basis functions and their ... See full document

... the linear correlation calcula- tion of modular addition, and introduce an algorithm to construct the input-out masks of specific correlation ...combinational linear approximation table (cLAT), which can ... See full document

... first ARX- based family of block ciphers that provides provable bounds on the maximal length of differential characteristics and linear ...for ARX-based symmetric-key primitives to ... See full document

... A new iterate is obtained by searching the optimal step size along a new descent direction which is obtained by the linear combination of two descent ...proposed method is ... See full document

... best differential trails in the ARX cipher ...the new method on round-reduced variants of the block cipher ...the differential paths with probability higher than 2 −128 ...the ... See full document

... [eprint.iacr.org/2009/117] method of virtual isomorphisms of ciphers was proposed for ...That method is based on conjugation, and it is not practical because all round operations except one become ... See full document

... for differential trails, originally proposed for S-box based ciphers, to the class of ARX ...block ciphers TEA, XTEA, RAIDEN and SPECK as a testbed for demonstrating the practical ... See full document

... a new family of tweakable lightweight block ciphers - SKINNY was ...against differential cryptanalysis in the related-tweakey ...ential trails of SKINNY and search for the longest impossible ... See full document

... Impossible differential attack is one of powerful methods for analyzing block ...block ciphers, it must be safe for impossible differential ...impossible differential attack, the attack starts ... See full document

... another method to produce a more efficient ...efficient method for solving PDEs and ODEs (ordinary differential equations) with integer or fractional ...variables method is developed and ... See full document

... much new knowledge, one should not disregard analytical methods, since the solution of nonlinear equations possesses singularities which only the analytical method (as based upon the work of Poincare, ... See full document

... There are different kinds of method for selecting the best subset of regressors that have the most contribution to the output of nonlinear system, i.e. structure detection of nonlinear systems; such as ANOVA [1], ... See full document

... block ciphers proposed in CHES’15 by Yang, Zhu, Suder, Aagaard and Gong ...block ciphers proposed by NSA [4], which leads to a more compact and efficient implementation in ... See full document

... order differential equations [2, 3, ...fractional differential equations cannot be found thus analytical and approximated solutions have become essential tools for their solution ...analytical method ... See full document

... Nowadays notable contributions have been made theory and applications of the fractional differential equations(FDEs). Many problem can be modelling with the help of the FDEs in many areas such as seismic analysis, ... See full document

... against linear attacks, one has to demonstrate that the cipher does not possess certain statistical ...single linear trail, as this roughly corresponds to bounding the number of active ...a linear ... See full document

... For a long time there was for exact solutions to differential equations and although an emphasis on searching this produced a useful theory for certain classes of linear equations, it pr[r] ... See full document

... the linear model case, a representative sample of accelerogramms was used as system input and maxima of the absolute OP accelerations were ...its optimal value, received in ... See full document