{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,5]],"date-time":"2026-10-05T05:16:31Z","timestamp":1791177391729,"version":"4.1.0"},"publisher-location":"Berlin, Heidelberg","reference-count":40,"publisher":"Springer Berlin Heidelberg","isbn-type":[{"value":"9783540710387","type":"print"},{"value":"9783540710394","type":"electronic"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"DOI":"10.1007\/978-3-540-71039-4_6","type":"book-chapter","created":{"date-parts":[[2008,7,18]],"date-time":"2008-07-18T14:09:52Z","timestamp":1216390192000},"page":"97-115","source":"Crossref","is-referenced-by-count":62,"title":["Algebraic and Slide Attacks on KeeLoq"],"prefix":"10.1007","author":[{"given":"Nicolas T.","family":"Courtois","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Gregory V.","family":"Bard","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"David","family":"Wagner","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","reference":[{"key":"6_CR1","unstructured":"Bardet, M., Faug\u00e8re, J.-C., Salvy, B.: On the complexity of Gr\u00f6bner basis computation of semi-regular overdetermined algebraic equations. In: Proceedings of International Conference on Polynomial System Solving (ICPSS, Paris, France), pp. 71\u201375 (2004)"},{"key":"6_CR2","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"589","DOI":"10.1007\/3-540-45539-6_41","volume-title":"Advances in Cryptology - EUROCRYPT 2000","author":"A. Biryukov","year":"2000","unstructured":"Biryukov, A., Wagner, D.: Advanced Slide Attacks. In: Preneel, B. (ed.) EUROCRYPT 2000. LNCS, vol.\u00a01807, pp. 589\u2013606. Springer, Heidelberg (2000)"},{"key":"6_CR3","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"245","DOI":"10.1007\/3-540-48519-8_18","volume-title":"Fast Software Encryption","author":"A. Biryukov","year":"1999","unstructured":"Biryukov, A., Wagner, D.: Slide Attacks. In: Knudsen, L.R. (ed.) FSE 1999. LNCS, vol.\u00a01636, pp. 245\u2013259. Springer, Heidelberg (1999)"},{"key":"6_CR4","unstructured":"Bogdanov, A.: Cryptanalysis of the KeeLoq block cipher, \n                    \n                      http:\/\/eprint.iacr.org\/2007\/055"},{"key":"6_CR5","unstructured":"Bogdanov, A.: Attacks on the KeeLoq Block Cipher and Authentication Systems. In: 3rd Conference on RFID Security 2007, RFIDSec (2007)"},{"key":"6_CR6","series-title":"Lecture Notes in Computer Science","volume-title":"The 3rd SKLOIS Conference on Information Security and Cryptology (Inscrypt 2007)","author":"A. Bogdanov","year":"2007","unstructured":"Bogdanov, A.: Linear Slide Attacks on the KeeLoq Block Cipher. In: The 3rd SKLOIS Conference on Information Security and Cryptology (Inscrypt 2007). LNCS. Springer, Heidelberg (2007)"},{"key":"6_CR7","series-title":"Lecture Notes in Computer Science","first-page":"1","volume-title":"Information Security and Privacy","author":"C. Cid","year":"2007","unstructured":"Cid, C., Babbage, S., Pramstaller, N., Raddum, H.: An Analysis of the Hermes8 Stream Cipher. In: Pieprzyk, J., Ghodosi, H., Dawson, E. (eds.) ACISP 2007. LNCS, vol.\u00a04586, pp. 1\u201310. Springer, Heidelberg (2007)"},{"key":"6_CR8","unstructured":"Keeloq wikipedia article. On 25 January 2007 the specification given here was incorrect and was updated since, \n                    \n                      http:\/\/en.wikipedia.org\/wiki\/KeeLoq"},{"key":"6_CR9","unstructured":"Keeloq C source code by Ruptor, \n                    \n                      http:\/\/cryptolib.com\/ciphers\/"},{"key":"6_CR10","unstructured":"Courtois, N.: Examples of equations generated for experiments with algebraic cryptanalysis of KeeLoq, \n                    \n                      http:\/\/www.cryptosystem.net\/aes\/toyciphers.html"},{"key":"6_CR11","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"141","DOI":"10.1007\/3-540-36563-X_10","volume-title":"Topics in Cryptology - CT-RSA 2003","author":"N. Courtois","year":"2003","unstructured":"Courtois, N., Patarin, J.: About the XL Algorithm over GF(2). In: Joye, M. (ed.) CT-RSA 2003. LNCS, vol.\u00a02612, pp. 141\u2013157. Springer, Heidelberg (2003)"},{"key":"6_CR12","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"392","DOI":"10.1007\/3-540-45539-6_27","volume-title":"Advances in Cryptology - EUROCRYPT 2000","author":"N. Courtois","year":"2000","unstructured":"Courtois, N., Shamir, A., Patarin, J., Klimov, A.: Efficient Algorithms for solving Overdefined Systems of Multivariate Polynomial Equations. In: Preneel, B. (ed.) EUROCRYPT 2000. LNCS, vol.\u00a01807, pp. 392\u2013407. Springer, Heidelberg (2000)"},{"key":"6_CR13","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"267","DOI":"10.1007\/3-540-36178-2_17","volume-title":"Advances in Cryptology - ASIACRYPT 2002","author":"N. Courtois","year":"2002","unstructured":"Courtois, N., Pieprzyk, J.: Cryptanalysis of Block Ciphers with Overdefined Systems of Equations. In: Zheng, Y. (ed.) ASIACRYPT 2002. LNCS, vol.\u00a02501, pp. 267\u2013287. Springer, Heidelberg (2002)"},{"key":"6_CR14","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"345","DOI":"10.1007\/3-540-39200-9_21","volume-title":"Advances in Cryptology \u2013 EUROCRPYT 2003","author":"N. Courtois","year":"2003","unstructured":"Courtois, N., Meier, W.: Algebraic Attacks on Stream Ciphers with Linear Feedback. In: Biham, E. (ed.) EUROCRYPT 2003. LNCS, vol.\u00a02656, pp. 345\u2013359. Springer, Heidelberg (2003)"},{"key":"6_CR15","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"crossref","first-page":"67","DOI":"10.1007\/11506447_7","volume-title":"Advanced Encryption Standard \u2013 AES","author":"N. Courtois","year":"2005","unstructured":"Courtois, N.: General Principles of Algebraic Attacks and New Design Criteria for Components of Symmetric Ciphers. In: Dobbertin, H., Rijmen, V., Sowa, A. (eds.) AES 2005. LNCS, vol.\u00a03373, pp. 67\u201383. Springer, Heidelberg (2005)"},{"key":"6_CR16","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"crossref","first-page":"170","DOI":"10.1007\/11506447_15","volume-title":"Advanced Encryption Standard \u2013 AES","author":"N. Courtois","year":"2005","unstructured":"Courtois, N.: The Inverse S-box, Non-linear Polynomial Relations and Cryptanalysis of Block Ciphers. In: Dobbertin, H., Rijmen, V., Sowa, A. (eds.) AES 2005. LNCS, vol.\u00a03373, pp. 170\u2013188. Springer, Heidelberg (2005)"},{"key":"6_CR17","unstructured":"Courtois, N.T.: How Fast can be Algebraic Attacks on Block Ciphers? In: Biham, E., Handschuh, H., Lucks, S., Rijmen, V. (eds.) online proceedings of Dagstuhl Seminar 07021, Symmetric Cryptography (January 07-12, 2007), \n                    \n                      http:\/\/drops.dagstuhl.de\/portals\/index.php?semnr=07021\n                    \n                    \n                  , \n                    \n                      http:\/\/eprint.iacr.org\/2006\/168\/\n                    \n                    \n                   ISSN 1862 - 4405"},{"key":"6_CR18","unstructured":"Courtois, N.: CTC2 and Fast Algebraic Attacks on Block Ciphers Revisited, \n                    \n                      http:\/\/eprint.iacr.org\/2007\/152\/"},{"key":"6_CR19","volume-title":"Cryptography and Coding, 11-th IMA Conference","author":"N. Courtois","year":"2007","unstructured":"Courtois, N., Bard, G.V.: Algebraic Cryptanalysis of the Data Encryption Standard. In: Cryptography and Coding, 11-th IMA Conference, Cirencester, UK, December 18-20, 2007. Springer, Heidelberg (2007), \n                    \n                      eprint.iacr.org\/2006\/402\/\n                    \n                    \n                  ; Also presented at ECRYPT workshop Tools for Cryptanalysis, Krakow, September 24-25 (2007)"},{"key":"6_CR20","unstructured":"Bard, G.V., Courtois, N.T., Jefferson, C.: Efficient Methods for Conversion and Solution of Sparse Systems of Low-Degree Multivariate Polynomials over GF(2) via SAT-Solvers, \n                    \n                      http:\/\/eprint.iacr.org\/2007\/024\/"},{"key":"6_CR21","unstructured":"Courtois, N., Bard, G.V., Wagner, D.: Algebraic and Slide Attacks on KeeLoq, Older preprint with using incorrect specification of KeeLoq, \n                    \n                      eprint.iacr.org\/2007\/062\/"},{"key":"6_CR22","unstructured":"Courtois, N., Bard, G.V., Wagner, D.: An Improved Algebraic-Slide Attack on KeeLoq, A sequel to the oresent paper (preprint available from the authors)"},{"key":"#cr-split#-6_CR23.1","unstructured":"Biham, E., Dunkelman, O., Indesteege, S., Keller, N., Preneel, B.: How to Steal Cars ??? A Practical Attack on KeeLoq, Crypto 2007, rump session talk (2007);"},{"key":"#cr-split#-6_CR23.2","unstructured":"Full paper will be presented at Eurocrypt 2008 and published in Springer LNCS,                                           http:\/\/www.cosic.esat.kuleuven.be\/keeloq\/keeloq-rump.pdf"},{"key":"6_CR24","doi-asserted-by":"publisher","first-page":"61","DOI":"10.1016\/S0022-4049(99)00005-5","volume":"139","author":"J.-C. Faug\u00e8re","year":"1999","unstructured":"Faug\u00e8re, J.-C.: A new efficient algorithm for computing Gr\u00f6bner bases (F4). Journal of Pure and Applied Algebra\u00a0139, 61\u201388 (1999), \n                    \n                      www.elsevier.com\/locate\/jpaa","journal-title":"Journal of Pure and Applied Algebra"},{"key":"6_CR25","first-page":"807","volume-title":"Analytic Combinatorics","author":"P. Flajolet","year":"2008","unstructured":"Flajolet, P., Sedgewick, R.: Analytic Combinatorics, 807 pages. Cambridge University Press, Cambridge (to appear, 2008), \n                    \n                      http:\/\/algo.inria.fr\/flajolet\/Publications\/book.pdf"},{"key":"6_CR26","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"138","DOI":"10.1007\/3-540-36552-4_10","volume-title":"Information Security and Cryptology - ICISC 2002","author":"R.C.-W. Phan","year":"2003","unstructured":"Phan, R.C.-W., Furuya, S.: Sliding Properties of the DES Key Schedule and Potential Extensions to the Slide Attacks. In: Lee, P.J., Lim, C.H. (eds.) ICISC 2002. LNCS, vol.\u00a02587, pp. 138\u2013148. Springer, Heidelberg (2003)"},{"key":"6_CR27","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"214","DOI":"10.1007\/3-540-45861-1_17","volume-title":"Information Security and Cryptology - ICISC 2001","author":"S. Furuya","year":"2002","unstructured":"Furuya, S.: Slide Attacks with a Known-Plaintext Cryptanalysis. In: Kim, K.-c. (ed.) ICISC 2001. LNCS, vol.\u00a02288, pp. 214\u2013225. Springer, Heidelberg (2002)"},{"key":"6_CR28","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"452","DOI":"10.1007\/978-3-540-74619-5_28","volume-title":"Fast Software Encryption","author":"L. Granboulan","year":"2007","unstructured":"Granboulan, L., Pornin, T.: Perfect Block Ciphers with Small Blocks. In: Biryukov, A. (ed.) FSE 2007. LNCS, vol.\u00a04593, pp. 452\u2013465. Springer, Heidelberg (2007)"},{"key":"6_CR29","unstructured":"Gemplus Combats SIM Card Cloning with Strong Key Security Solution, Press release, Paris ( November 5, 2002), \n                    \n                      http:\/\/www.gemalto.com\/press\/gemplus\/2002\/r_d\/strong_key_05112002.htm"},{"key":"6_CR30","unstructured":"Grossman, E.K., Tuckerman, B.: Analysis of a Feistel-like cipher weakened by having no rotating key, IBM Thomas J. Watson Research Report RC 6375 (1977)"},{"key":"6_CR31","unstructured":"Kahn, D.: The Codebreakers, The Comprehensive History of Secret Communication from Ancient Times to the Internet (first published in 1967) (new chapter added in 1996)"},{"key":"6_CR32","unstructured":"Marraro, L., Massacci, F.: Towards the Formal Verification of Ciphers: Logical Cryptanalysis of DES. In: Proc. Third LICS Workshop on Formal Methods and Security Protocols, Federated Logic Conferences (FLOC 1999) (1999)"},{"key":"6_CR33","unstructured":"Microchip. An Introduction to KeeLoq Code Hopping (1996), \n                    \n                      http:\/\/ww1.microchip.com\/downloads\/en\/AppNotes\/91002a.pdf"},{"key":"6_CR34","unstructured":"Microchip. Hopping Code Decoder using a PIC16C56, AN642 (1998), \n                    \n                      http:\/\/www.keeloq.boom.ru\/decryption.pdf"},{"key":"6_CR35","unstructured":"Microchip. Using KeeLoq to Validate Subsystem Compatibility, AN827 (2002), \n                    \n                      http:\/\/ww1.microchip.com\/downloads\/en\/AppNotes\/00827a.pdf"},{"key":"6_CR36","unstructured":"MiniSat 2.0. An open-source SAT solver package, by Niklas E\u00e9n, Niklas S\u00f6rensson, \n                    \n                      http:\/\/www.cs.chalmers.se\/Cs\/Research\/FormalMethods\/MiniSat\/"},{"key":"6_CR37","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"102","DOI":"10.1007\/11814948_13","volume-title":"Theory and Applications of Satisfiability Testing - SAT 2006","author":"I. Mironov","year":"2006","unstructured":"Mironov, I., Zhang, L.: Applications of SAT Solvers to Cryptanalysis of Hash Functions. In: Biere, A., Gomes, C.P. (eds.) SAT 2006. LNCS, vol.\u00a04121, pp. 102\u2013115. Springer, Heidelberg (2006), \n                    \n                      http:\/\/eprint.iacr.org\/2006\/254"},{"key":"6_CR38","unstructured":"Riedel, M.R.: Random Permutation Statistics, \n                    \n                      http:\/\/www.geocities.com\/markoriedelde\/papers\/randperms.pdf"},{"key":"6_CR39","unstructured":"Singular, A.: Free Computer Algebra System for polynomial computations, \n                    \n                      http:\/\/www.singular.uni-kl.de\/"}],"container-title":["Lecture Notes in Computer Science","Fast Software Encryption"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-540-71039-4_6.pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,5,3]],"date-time":"2021-05-03T04:35:26Z","timestamp":1620016526000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-540-71039-4_6"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[null]]},"ISBN":["9783540710387","9783540710394"],"references-count":40,"URL":"https:\/\/doi.org\/10.1007\/978-3-540-71039-4_6","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[]}}