Differential and linear cryptanalysis are two of the most powerful techniques to analyze
symmetric-key primitives. For modern ciphers, resistance against these attacks is therefore a …

The boomerang attack is a cryptanalysis technique that combines two short differentials
instead of using a single long differential. It has been applied to many primitives, and results …

We present new techniques to efficiently scan the space of high-probability differential trails
in bit-oriented ciphers. Differential trails consist in sequences of state patterns that we …

An increasing number of cryptographic primitives are built using the ARX operations:
addition modulo 2n, bit rotation and XOR. Because of their very fast performance in software …

BLAKE2 is a hash function introduced at ACNS 2013, which has been adopted in many
constructions and applications. It is a successor to the SHA-3 finalist BLAKE, which received …

Hash functions are often constructed based on permutations or blockciphers, and security
proofs are typically done in the ideal permutation or cipher model. However, once these …

In this paper, we present a distinguisher for the permutation of SIMD-512 with complexity 2
226.52. We extend the attack to a distinguisher for the compression function with complexity …

When is a system secure? Although the question may seem easy, the answer turns out to be
very difficult. Take a mobile phone for example. It's quite straightforward to test if the device …

In the recent years, several hash constructions have been introduced that aim at achieving
enhanced security margins by strengthening the Merkle-Damgård mode. However, their …

We consider highly structured truncated differential paths to mount a new rebound attack on
Grøstl-512, a hash functions based on two AES-like permutations, P 1024 and Q 1024, with …