{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,29]],"date-time":"2026-06-29T22:09:14Z","timestamp":1782770954024,"version":"3.54.5"},"publisher-location":"Cham","reference-count":32,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783031587153","type":"print"},{"value":"9783031587160","type":"electronic"}],"license":[{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2024]]},"DOI":"10.1007\/978-3-031-58716-0_5","type":"book-chapter","created":{"date-parts":[[2024,4,28]],"date-time":"2024-04-28T03:01:57Z","timestamp":1714273317000},"page":"128-157","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":7,"title":["Partial Sums Meet FFT: Improved Attack on\u00a06-Round AES"],"prefix":"10.1007","author":[{"given":"Orr","family":"Dunkelman","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Shibam","family":"Ghosh","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Nathan","family":"Keller","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ga\u00ebtan","family":"Leurent","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Avichai","family":"Marmor","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Victor","family":"Mollimard","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2024,4,29]]},"reference":[{"key":"5_CR1","unstructured":"Advanced Encryption Standard (AES). National Institute of Standards and Technology, NIST FIPS PUB 197, U.S. Department of Commerce, November 2001"},{"key":"5_CR2","series-title":"Lecture Notes in Electrical Engineering","doi-asserted-by":"publisher","first-page":"181","DOI":"10.1007\/978-3-319-23609-4_12","volume-title":"Physical and Data-Link Security Techniques for Future Communication Systems","author":"F Ald\u00e0","year":"2016","unstructured":"Ald\u00e0, F., Aragona, R., Nicolodi, L., Sala, M.: Implementation and improvement of the partial sum attack on 6-round AES. In: Baldi, M., Tomasin, S. (eds.) Physical and Data-Link Security Techniques for Future Communication Systems. LNEE, vol. 358, pp. 181\u2013195. Springer, Cham (2016). https:\/\/doi.org\/10.1007\/978-3-319-23609-4_12"},{"key":"5_CR3","unstructured":"Andoni, A., Indyk, P., Laarhoven, T., Razenshteyn, I., Schmidt, L.: Fast Fast Hadamard Transform. https:\/\/github.com\/FALCONN-LIB\/FFHT"},{"key":"5_CR4","doi-asserted-by":"crossref","unstructured":"Ankele, R., Dobraunig, C., Guo, J., Lambooij, E., Leander, G., Todo, Y.: Zero-correlation attacks on tweakable block ciphers with linear TWEAKEY expansion. Cryptology ePrint Archive, Report 2019\/185 (2019). https:\/\/eprint.iacr.org\/2019\/185","DOI":"10.46586\/tosc.v2019.i1.192-235"},{"key":"5_CR5","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"641","DOI":"10.1007\/978-3-030-45724-2_22","volume-title":"Advances in Cryptology \u2013 EUROCRYPT 2020","author":"Z Bao","year":"2020","unstructured":"Bao, Z., Guo, C., Guo, J., Song, L.: TNT: how to tweak a block cipher. In: Canteaut, A., Ishai, Y. (eds.) EUROCRYPT 2020, Part II. LNCS, vol. 12106, pp. 641\u2013673. Springer, Cham (2020). https:\/\/doi.org\/10.1007\/978-3-030-45724-2_22"},{"key":"5_CR6","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"315","DOI":"10.1007\/978-3-662-46800-5_13","volume-title":"Advances in Cryptology \u2013 EUROCRYPT 2015","author":"A Bar-On","year":"2015","unstructured":"Bar-On, A., Dinur, I., Dunkelman, O., Lallemand, V., Keller, N., Tsaban, B.: Cryptanalysis of SP networks with partial non-linear layers. In: Oswald, E., Fischlin, M. (eds.) EUROCRYPT 2015. LNCS, vol. 9056, pp. 315\u2013342. Springer, Heidelberg (2015). https:\/\/doi.org\/10.1007\/978-3-662-46800-5_13"},{"issue":"3","key":"5_CR7","doi-asserted-by":"publisher","first-page":"1003","DOI":"10.1007\/s00145-019-09336-w","volume":"33","author":"A Bar-On","year":"2020","unstructured":"Bar-On, A., Dunkelman, O., Keller, N., Ronen, E., Shamir, A.: Improved key recovery attacks on reduced-round AES with practical data and memory complexities. J. Cryptol. 33(3), 1003\u20131043 (2020)","journal-title":"J. Cryptol."},{"key":"5_CR8","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"435","DOI":"10.1007\/978-3-662-53018-4_16","volume-title":"Advances in Cryptology \u2013 CRYPTO 2016","author":"A Bar-On","year":"2016","unstructured":"Bar-On, A., Keller, N.: A $$2^{70}$$ attack on the full MISTY1. In: Robshaw, M., Katz, J. (eds.) CRYPTO 2016, Part I. LNCS, vol. 9814, pp. 435\u2013456. Springer, Heidelberg (2016). https:\/\/doi.org\/10.1007\/978-3-662-53018-4_16"},{"key":"5_CR9","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"3","DOI":"10.1007\/978-3-031-30634-1_1","volume-title":"Advances in Cryptology \u2013 EUROCRYPT 2023","author":"A Bariant","year":"2023","unstructured":"Bariant, A., Leurent, G.: Truncated boomerang attacks and application to AES-based ciphers. In: Hazay, C., Stam, M. (eds.) EUROCRYPT 2023. LNCS, vol. 14007, pp. 3\u201335. Springer, Cham (2023). https:\/\/doi.org\/10.1007\/978-3-031-30634-1_1"},{"key":"5_CR10","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"329","DOI":"10.1007\/978-3-030-56877-1_12","volume-title":"Advances in Cryptology \u2013 CRYPTO 2020","author":"C Beierle","year":"2020","unstructured":"Beierle, C., Leander, G., Todo, Y.: Improved differential-linear attacks with applications to ARX ciphers. In: Micciancio, D., Ristenpart, T. (eds.) CRYPTO 2020, Part III. LNCS, vol. 12172, pp. 329\u2013358. Springer, Cham (2020). https:\/\/doi.org\/10.1007\/978-3-030-56877-1_12"},{"key":"5_CR11","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"11","DOI":"10.1007\/11506447_2","volume-title":"Advanced Encryption Standard \u2013 AES","author":"A Biryukov","year":"2005","unstructured":"Biryukov, A.: The boomerang attack on 5 and 6-round reduced AES. In: Dobbertin, H., Rijmen, V., Sowa, A. (eds.) AES 2004. LNCS, vol. 3373, pp. 11\u201315. Springer, Heidelberg (2005). https:\/\/doi.org\/10.1007\/11506447_2"},{"key":"5_CR12","doi-asserted-by":"crossref","unstructured":"Biryukov, A., Khovratovich, D., Perrin, L.: Multiset-algebraic cryptanalysis of reduced Kuznyechik, Khazad, and secret SPNs. IACR Trans. Symm. Cryptol. 2016(2), 226\u2013247 (2016). https:\/\/tosc.iacr.org\/index.php\/ToSC\/article\/view\/572","DOI":"10.46586\/tosc.v2016.i2.226-247"},{"key":"5_CR13","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"306","DOI":"10.1007\/978-3-662-43414-7_16","volume-title":"Selected Areas in Cryptography \u2013 SAC 2013","author":"A Bogdanov","year":"2014","unstructured":"Bogdanov, A., Geng, H., Wang, M., Wen, L., Collard, B.: Zero-correlation linear cryptanalysis with FFT and improved attacks on ISO standards Camellia and CLEFIA. In: Lange, T., Lauter, K., Lison\u011bk, P. (eds.) SAC 2013. LNCS, vol. 8282, pp. 306\u2013323. Springer, Heidelberg (2014). https:\/\/doi.org\/10.1007\/978-3-662-43414-7_16"},{"key":"5_CR14","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"77","DOI":"10.1007\/978-3-540-76788-6_7","volume-title":"Information Security and Cryptology - ICISC 2007","author":"B Collard","year":"2007","unstructured":"Collard, B., Standaert, F.-X., Quisquater, J.-J.: Improving the time complexity of Matsui\u2019s linear cryptanalysis. In: Nam, K.-H., Rhee, G. (eds.) ICISC 2007. LNCS, vol. 4817, pp. 77\u201388. Springer, Heidelberg (2007). https:\/\/doi.org\/10.1007\/978-3-540-76788-6_7"},{"key":"5_CR15","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"223","DOI":"10.1007\/978-3-030-95312-6_10","volume-title":"Topics in Cryptology \u2013 CT-RSA 2022","author":"J Cui","year":"2022","unstructured":"Cui, J., Hu, K., Wang, Q., Wang, M.: Integral attacks on Pyjamask-96 and round-reduced Pyjamask-128. In: Galbraith, S.D. (ed.) CT-RSA 2022. LNCS, vol. 13161, pp. 223\u2013246. Springer, Cham (2022). https:\/\/doi.org\/10.1007\/978-3-030-95312-6_10"},{"key":"5_CR16","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"149","DOI":"10.1007\/BFb0052343","volume-title":"Fast Software Encryption","author":"J Daemen","year":"1997","unstructured":"Daemen, J., Knudsen, L., Rijmen, V.: The block cipher Square. In: Biham, E. (ed.) FSE 1997. LNCS, vol. 1267, pp. 149\u2013165. Springer, Heidelberg (1997). https:\/\/doi.org\/10.1007\/BFb0052343"},{"issue":"2","key":"5_CR17","doi-asserted-by":"publisher","first-page":"443","DOI":"10.1007\/s10623-021-00989-y","volume":"90","author":"F Demirba\u015f","year":"2022","unstructured":"Demirba\u015f, F., Kara, O.: Integral characteristics by keyspace partitioning. Des. Codes Crypt. 90(2), 443\u2013472 (2022)","journal-title":"Des. Codes Crypt."},{"key":"5_CR18","doi-asserted-by":"crossref","unstructured":"Dolmatov, V., e.: Gost r 34.12-2015: Block cipher \u201cKuznyechik\u201d (2016). https:\/\/www.rfc-editor.org\/rfc\/rfc7801.html","DOI":"10.17487\/RFC7801"},{"key":"5_CR19","doi-asserted-by":"crossref","unstructured":"Dunkelman, O., Ghosh, S., Keller, N., Leurent, G., Marmor, A., Mollimard, V.: Partial sums meet FFT: Improved attack on 6-round AES. Cryptology ePrint Archive, Paper 2023\/1659 (2023). https:\/\/eprint.iacr.org\/2023\/1659","DOI":"10.1007\/978-3-031-58716-0_5"},{"key":"5_CR20","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"280","DOI":"10.1007\/978-3-030-45721-1_11","volume-title":"Advances in Cryptology \u2013 EUROCRYPT 2020","author":"O Dunkelman","year":"2020","unstructured":"Dunkelman, O., Keller, N., Ronen, E., Shamir, A.: The retracing boomerang attack. In: Canteaut, A., Ishai, Y. (eds.) EUROCRYPT 2020, Part I. LNCS, vol. 12105, pp. 280\u2013309. Springer, Cham (2020). https:\/\/doi.org\/10.1007\/978-3-030-45721-1_11"},{"key":"5_CR21","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"213","DOI":"10.1007\/3-540-44706-7_15","volume-title":"Fast Software Encryption","author":"N Ferguson","year":"2001","unstructured":"Ferguson, N., Kelsey, J., Lucks, S., Schneier, B., Stay, M., Wagner, D.: Improved cryptanalysis of Rijndael. In: Goos, G., Hartmanis, J., van Leeuwen, J., Schneier, B. (eds.) FSE 2000. LNCS, vol. 1978, pp. 213\u2013230. Springer, Heidelberg (2001). https:\/\/doi.org\/10.1007\/3-540-44706-7_15"},{"key":"5_CR22","doi-asserted-by":"crossref","unstructured":"Katagi, M.: The 128-bit blockcipher CLEFIA (2011). https:\/\/www.rfc-editor.org\/rfc\/rfc6114","DOI":"10.17487\/rfc6114"},{"key":"5_CR23","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"28","DOI":"10.1007\/978-3-642-27890-7_3","volume-title":"Information Security Applications","author":"Y Li","year":"2012","unstructured":"Li, Y., Wu, W., Zhang, L.: Improved integral attacks on reduced-round CLEFIA block cipher. In: Jung, S., Yung, M. (eds.) WISA 2011. LNCS, vol. 7115, pp. 28\u201339. Springer, Heidelberg (2012). https:\/\/doi.org\/10.1007\/978-3-642-27890-7_3"},{"key":"5_CR24","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"54","DOI":"10.1007\/BFb0052334","volume-title":"Fast Software Encryption","author":"M Matsui","year":"1997","unstructured":"Matsui, M.: New block encryption algorithm MISTY. In: Biham, E. (ed.) FSE 1997. LNCS, vol. 1267, pp. 54\u201368. Springer, Heidelberg (1997). https:\/\/doi.org\/10.1007\/BFb0052334"},{"key":"5_CR25","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"37","DOI":"10.1007\/978-3-642-14081-5_3","volume-title":"Information Security and Privacy","author":"PH Nguyen","year":"2010","unstructured":"Nguyen, P.H., Wei, L., Wang, H., Ling, S.: On multidimensional linear cryptanalysis. In: Steinfeld, R., Hawkes, P. (eds.) ACISP 2010. LNCS, vol. 6168, pp. 37\u201352. Springer, Heidelberg (2010). https:\/\/doi.org\/10.1007\/978-3-642-14081-5_3"},{"key":"5_CR26","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"61","DOI":"10.1007\/978-3-642-22497-3_5","volume-title":"Information Security and Privacy","author":"PH Nguyen","year":"2011","unstructured":"Nguyen, P.H., Wu, H., Wang, H.: Improving the algorithm 2 in multidimensional linear cryptanalysis. In: Parampalli, U., Hawkes, P. (eds.) ACISP 2011. LNCS, vol. 6812, pp. 61\u201374. Springer, Heidelberg (2011). https:\/\/doi.org\/10.1007\/978-3-642-22497-3_5"},{"issue":"3","key":"5_CR27","doi-asserted-by":"publisher","first-page":"137","DOI":"10.46586\/tosc.v2021.i3.137-169","volume":"2021","author":"M Rahman","year":"2021","unstructured":"Rahman, M., Saha, D., Paul, G.: Boomeyong: embedding yoyo within boomerang and its applications to key recovery attacks on AES and Pholkos. IACR Trans. Symmetric Cryptol. 2021(3), 137\u2013169 (2021)","journal-title":"IACR Trans. Symmetric Cryptol."},{"key":"5_CR28","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"234","DOI":"10.1007\/978-3-642-35999-6_16","volume-title":"Selected Areas in Cryptography","author":"Y Sasaki","year":"2013","unstructured":"Sasaki, Y., Wang, L.: Meet-in-the-middle technique for integral attacks against feistel ciphers. In: Knudsen, L.R., Wu, H. (eds.) SAC 2012. LNCS, vol. 7707, pp. 234\u2013251. Springer, Heidelberg (2013). https:\/\/doi.org\/10.1007\/978-3-642-35999-6_16"},{"key":"5_CR29","unstructured":"Todo, Y.: FFT-based key recovery for the integral attack. Cryptology ePrint Archive, Report 2014\/187 (2014). https:\/\/eprint.iacr.org\/2014\/187"},{"key":"5_CR30","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"64","DOI":"10.1007\/978-3-319-12280-9_5","volume-title":"Cryptology and Network Security","author":"Y Todo","year":"2014","unstructured":"Todo, Y., Aoki, K.: FFT key recovery for integral attack. In: Gritzalis, D., Kiayias, A., Askoxylakis, I. (eds.) CANS 2014. LNCS, vol. 8813, pp. 64\u201381. Springer, Cham (2014). https:\/\/doi.org\/10.1007\/978-3-319-12280-9_5"},{"key":"5_CR31","doi-asserted-by":"crossref","unstructured":"Tunstall, M.: Improved \u201cpartial sums\u201d-based square attack on AES. In: Proceedings of the International Conference on Security and Cryptography - SECRYPT, (ICETE 2012), pp. 25\u201334. INSTICC, SciTePress (2012)","DOI":"10.5220\/0003990300250034"},{"key":"5_CR32","unstructured":"Yi, W., Chen, S., Wei, K.: Zero-correlation linear cryptanalysis of reduced round ARIA with partial-sum and FFT. arXiv preprint arXiv:1406.3240 (2014)"}],"container-title":["Lecture Notes in Computer Science","Advances in Cryptology \u2013 EUROCRYPT 2024"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-031-58716-0_5","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,4,28]],"date-time":"2026-04-28T00:05:38Z","timestamp":1777334738000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-031-58716-0_5"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024]]},"ISBN":["9783031587153","9783031587160"],"references-count":32,"URL":"https:\/\/doi.org\/10.1007\/978-3-031-58716-0_5","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024]]},"assertion":[{"value":"29 April 2024","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"EUROCRYPT","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Annual International Conference on the Theory and Applications of Cryptographic Techniques","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Zurich","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Switzerland","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2024","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"26 May 2024","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"30 May 2024","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"43","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"eurocrypt2024","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/eurocrypt.iacr.org\/2024\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"This content has been made available to all.","name":"free","label":"Free to read"}]}}