{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,2]],"date-time":"2026-01-02T02:44:57Z","timestamp":1767321897238,"version":"3.48.0"},"publisher-location":"Cham","reference-count":31,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783032105356","type":"print"},{"value":"9783032105363","type":"electronic"}],"license":[{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026]]},"DOI":"10.1007\/978-3-032-10536-3_3","type":"book-chapter","created":{"date-parts":[[2026,1,2]],"date-time":"2026-01-02T02:41:33Z","timestamp":1767321693000},"page":"55-78","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Practical Collision Attacks on Reduced-Round Xoodyak Hash Mode"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-7355-3832","authenticated-orcid":false,"given":"Huina","family":"Li","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1405-0741","authenticated-orcid":false,"given":"Le","family":"He","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6428-1655","authenticated-orcid":false,"given":"Weidong","family":"Qiu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2026,1,2]]},"reference":[{"issue":"4","key":"3_CR1","doi-asserted-by":"publisher","first-page":"99","DOI":"10.46586\/tosc.v2017.i4.99-129","volume":"2017","author":"A Abdelkhalek","year":"2017","unstructured":"Abdelkhalek, A., Sasaki, Y., Todo, Y., Tolba, M., Youssef, A.M.: MILP modeling for (large) S-boxes to optimize probability of differential characteristics. IACR Trans. Symmetric Cryptol. 2017(4), 99\u2013129 (2017)","journal-title":"IACR Trans. Symmetric Cryptol."},{"key":"3_CR2","doi-asserted-by":"crossref","unstructured":"Bellini, E., et al.: Differential cryptanalysis with SAT, SMT, MILP, and CP: a detailed comparison for bit-oriented primitives. In: CANS. Lecture Notes in Computer Science, vol. 14342, pp. 268\u2013292 (2023)","DOI":"10.1007\/978-981-99-7563-1_13"},{"key":"3_CR3","unstructured":"Bertoni, Guido and Peeters, Micha\u00ebl and Van Assche, Gilles and others: The Keccak reference (2011). http:\/\/keccak.noekeon.org"},{"key":"3_CR4","unstructured":"Biere, A.: CaDiCaL, Lingeling, Plingeling, Treengeling, YalSAT entering the SAT competition 2017. In: Balyo, T., Heule, M., J\u00e4rvisalo, M. (eds.) Proc.\u00a0of SAT Competition 2017 \u2013 Solver and Benchmark Descriptions. Department of Computer Science Series of Publications B, vol. B-2017-1, pp. 14\u201315 (2017)"},{"issue":"1","key":"3_CR5","doi-asserted-by":"publisher","first-page":"3","DOI":"10.1007\/BF00630563","volume":"4","author":"E Biham","year":"1991","unstructured":"Biham, E., Shamir, A.: Differential cryptanalysis of DES-like cryptosystems. J. Cryptol. 4(1), 3\u201372 (1991). https:\/\/doi.org\/10.1007\/BF00630563","journal-title":"J. Cryptol."},{"key":"3_CR6","doi-asserted-by":"crossref","unstructured":"Choo, D., Soos, M., Chai, K.M.A., Meel, K.S.: Bosphorus: bridging ANF and CNF solvers. In: Design, Automation & Test in Europe Conference & Exhibition, DATE 2019. pp. 468\u2013473 (2019)","DOI":"10.23919\/DATE.2019.8715061"},{"key":"3_CR7","first-page":"1","volume":"2018","author":"J Daemen","year":"2018","unstructured":"Daemen, J., Hoffert, S., Assche, G.V., Keer, R.V.: The design of Xoodoo and Xoofff. IACR Trans. Symm. Cryptol. 2018, 1\u201338 (2018)","journal-title":"IACR Trans. Symm. Cryptol."},{"key":"3_CR8","doi-asserted-by":"crossref","unstructured":"Daemen, J., Hoffert, S., Peeters, M., Van\u00a0Assche, G., Van\u00a0Keer, R.: Xoodyak, a lightweight cryptographic scheme. IACR Trans. Symm. Cryptol. 2020, 60\u201387 (2020)","DOI":"10.46586\/tosc.v2020.iS1.60-87"},{"key":"3_CR9","unstructured":"Degr\u00e9, M., Derbez, P., Lahaye, L., Schrottenloher, A.: New models for the cryptanalysis of Ascon. IACR Cryptol. ePrint Arch, p.\u00a0298 (2024)"},{"key":"3_CR10","doi-asserted-by":"publisher","unstructured":"Dinur, I., Dunkelman, O., Shamir, A.: New attacks on Keccak-224 and Keccak-256. In: Canteaut, A. (ed.) FSE 2012. LNCS, vol. 7549, pp. 442\u2013461. Springer, Heidelberg (2012). https:\/\/doi.org\/10.1007\/978-3-642-34047-5_25","DOI":"10.1007\/978-3-642-34047-5_25"},{"key":"3_CR11","doi-asserted-by":"crossref","unstructured":"Dong, X., Zhao, B., Qin, L., Hou, Q., Zhang, S., Wang, X.: Generic MitM attack frameworks on sponge constructions. In: CRYPTO (4). Lecture Notes in Computer Science, vol. 14923, pp. 3\u201337. Springer (2024)","DOI":"10.1007\/978-3-031-68385-5_1"},{"key":"3_CR12","unstructured":"Guido, B., Joan, D., Micha\u00ebl, P., Gilles, V.: Cryptographic sponge functions. https:\/\/keccak.team\/files\/CSF-0.1.pdf (2011)"},{"issue":"1","key":"3_CR13","doi-asserted-by":"publisher","first-page":"228","DOI":"10.1007\/s00145-019-09313-3","volume":"33","author":"J Guo","year":"2020","unstructured":"Guo, J., Liao, G., Liu, G., Liu, M., Qiao, K., Song, L.: Practical collision attacks against round-reduced SHA-3. J. Cryptol. 33(1), 228\u2013270 (2020)","journal-title":"J. Cryptol."},{"key":"3_CR14","doi-asserted-by":"crossref","unstructured":"Guo, J., Liu, G., Song, L., Tu, Y.: Exploring SAT for cryptanalysis:(quantum) collision attacks against 6-round SHA-3. In: International Conference on the Theory and Application of Cryptology and Information Security, pp. 645\u2013674. Springer (2022)","DOI":"10.1007\/978-3-031-22969-5_22"},{"key":"3_CR15","doi-asserted-by":"crossref","unstructured":"Huang, S., Ben-Yehuda, O.A., Dunkelman, O., Maximov, A.: Finding collisions against 4-round SHA3-384 in practical time. IACR Cryptol. ePrint Arch, p.\u00a0194 (2022)","DOI":"10.46586\/tosc.v2022.i3.239-270"},{"key":"3_CR16","doi-asserted-by":"crossref","unstructured":"Li, H., Zhang, H., Hu, K., Liu, G., Qiu, W.: AlgSAT - a SAT method for verification of differential trails from an algebraic perspective. In: ACISP (1). Lecture Notes in Computer Science, vol. 14895, pp. 450\u2013471. Springer (2024)","DOI":"10.1007\/978-981-97-5025-2_23"},{"key":"3_CR17","doi-asserted-by":"publisher","unstructured":"Liu, F., Isobe, T., Meier, W.: Automatic verification of differential characteristics: application to reduced Gimli. In: Micciancio, D., Ristenpart, T. (eds.) CRYPTO 2020. LNCS, vol. 12172, pp. 219\u2013248. Springer, Cham (2020). https:\/\/doi.org\/10.1007\/978-3-030-56877-1_8","DOI":"10.1007\/978-3-030-56877-1_8"},{"key":"3_CR18","series-title":"Advances in Intelligent Systems and Computing","doi-asserted-by":"publisher","first-page":"637","DOI":"10.1007\/978-3-030-73103-8_45","volume-title":"Advances in Information and Communication","author":"G Liu","year":"2021","unstructured":"Liu, G., Lu, J., Li, H., Tang, P., Qiu, W.: Preimage attacks against lightweight scheme Xoodyak based on deep learning. In: Arai, K. (ed.) FICC 2021. AISC, vol. 1364, pp. 637\u2013648. Springer, Cham (2021). https:\/\/doi.org\/10.1007\/978-3-030-73103-8_45"},{"key":"3_CR19","doi-asserted-by":"publisher","unstructured":"Liu, M., Lu, X., Lin, D.: Differential-linear cryptanalysis from an algebraic perspective. In: Malkin, T., Peikert, C. (eds.) CRYPTO 2021. LNCS, vol. 12827, pp. 247\u2013277. Springer, Cham (2021). https:\/\/doi.org\/10.1007\/978-3-030-84252-9_9","DOI":"10.1007\/978-3-030-84252-9_9"},{"key":"3_CR20","doi-asserted-by":"crossref","unstructured":"McCluskey, E.J.: Minimization of Boolean functions. Bell Syst. Techn. J. 35(6), 1417\u20131444 (1956)","DOI":"10.1002\/j.1538-7305.1956.tb03835.x"},{"issue":"4","key":"3_CR21","doi-asserted-by":"publisher","first-page":"187","DOI":"10.46586\/tosc.v2023.i4.187-214","volume":"2023","author":"S Mella","year":"2023","unstructured":"Mella, S., Daemen, J., Assche, G.V.: Tighter trail bounds for Xoodoo. IACR Trans. Symmetric Cryptol. 2023(4), 187\u2013214 (2023)","journal-title":"IACR Trans. Symmetric Cryptol."},{"key":"3_CR22","unstructured":"NIST: The NIST Lightweight Cryptography Project (2018). https:\/\/csrc.nist.gov\/Projects\/lightweight-cryptography"},{"key":"3_CR23","doi-asserted-by":"publisher","unstructured":"Qiao, K., Song, L., Liu, M., Guo, J.: New collision attacks on round-reduced Keccak. In: Coron, J.-S., Nielsen, J.B. (eds.) EUROCRYPT 2017. LNCS, vol. 10212, pp. 216\u2013243. Springer, Cham (2017). https:\/\/doi.org\/10.1007\/978-3-319-56617-7_8","DOI":"10.1007\/978-3-319-56617-7_8"},{"key":"3_CR24","doi-asserted-by":"crossref","unstructured":"Qin, L., Hua, J., Dong, X., Yan, H., Wang, X.: Meet-in-the-middle preimage attacks on sponge-based hashing. In: EUROCRYPT (4). Lecture Notes in Computer Science, vol. 14007, pp. 158\u2013188 (2023)","DOI":"10.1007\/978-3-031-30634-1_6"},{"issue":"9","key":"3_CR25","doi-asserted-by":"publisher","first-page":"627","DOI":"10.1080\/00029890.1955.11988710","volume":"62","author":"WV Quine","year":"1955","unstructured":"Quine, W.V.: A way to simplify truth functions. Am. Math. Mon. 62(9), 627\u2013631 (1955)","journal-title":"Am. Math. Mon."},{"issue":"3","key":"3_CR26","doi-asserted-by":"publisher","first-page":"182","DOI":"10.46586\/tosc.v2018.i3.182-214","volume":"2018","author":"L Song","year":"2018","unstructured":"Song, L., Guo, J.: Cube-attack-like cryptanalysis of round-reduced Keccak using MILP. IACR Trans. Symmetric Cryptol. 2018(3), 182\u2013214 (2018)","journal-title":"IACR Trans. Symmetric Cryptol."},{"key":"3_CR27","doi-asserted-by":"publisher","unstructured":"Song, L., Liao, G., Guo, J.: Non-full Sbox linearization: applications to collision attacks on round-reduced Keccak. In: Katz, J., Shacham, H. (eds.) CRYPTO 2017. LNCS, vol. 10402, pp. 428\u2013451. Springer, Cham (2017). https:\/\/doi.org\/10.1007\/978-3-319-63715-0_15","DOI":"10.1007\/978-3-319-63715-0_15"},{"key":"3_CR28","doi-asserted-by":"publisher","unstructured":"Stevens, M., Karpman, P., Peyrin, T.: Freestart collision for full SHA-1. In: Fischlin, M., Coron, J.-S. (eds.) EUROCRYPT 2016. LNCS, vol. 9665, pp. 459\u2013483. Springer, Heidelberg (2016). https:\/\/doi.org\/10.1007\/978-3-662-49890-3_18","DOI":"10.1007\/978-3-662-49890-3_18"},{"key":"3_CR29","doi-asserted-by":"publisher","unstructured":"Sun, L., Wang, W., Wang, M.: More accurate differential properties of LED64 and Midori64. IACR Trans. Symmetric Cryptol. 2018(3), 93\u2013123 (2018). https:\/\/doi.org\/10.13154\/tosc.v2018.i3.93-123","DOI":"10.13154\/tosc.v2018.i3.93-123"},{"key":"3_CR30","unstructured":"The Sage Developers: SageMath, the sage mathematics software system (version 9.5s) (2022). https:\/\/www.sagemath.org"},{"issue":"8","key":"3_CR31","first-page":"1231","volume":"63","author":"H Zhou","year":"2020","unstructured":"Zhou, H., Li, Z., Dong, X., Jia, K., Meier, W.: Practical key-recovery attacks on round-reduced Ketje Jr. Xoodoo-AE and Xoodyak. Comput. J. 63(8), 1231\u20131246 (2020)","journal-title":"Xoodoo-AE and Xoodyak. Comput. J."}],"container-title":["Lecture Notes in Computer Science","Selected Areas in Cryptography \u2013 SAC 2025"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-032-10536-3_3","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,1,2]],"date-time":"2026-01-02T02:41:36Z","timestamp":1767321696000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-032-10536-3_3"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026]]},"ISBN":["9783032105356","9783032105363"],"references-count":31,"URL":"https:\/\/doi.org\/10.1007\/978-3-032-10536-3_3","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026]]},"assertion":[{"value":"2 January 2026","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"SAC","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Selected Areas in Cryptography","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Toronto, ON","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Canada","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2025","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"13 August 2025","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"15 August 2025","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"32","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"sacrypt2025","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/sacworkshop.org\/SAC25\/index.html","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}