{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,14]],"date-time":"2026-02-14T00:24:32Z","timestamp":1771028672493,"version":"3.50.1"},"reference-count":39,"publisher":"Springer Science and Business Media LLC","issue":"4","license":[{"start":{"date-parts":[[2021,10,1]],"date-time":"2021-10-01T00:00:00Z","timestamp":1633046400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2021,10,1]],"date-time":"2021-10-01T00:00:00Z","timestamp":1633046400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["J Cryptol"],"published-print":{"date-parts":[[2021,10]]},"DOI":"10.1007\/s00145-021-09413-z","type":"journal-article","created":{"date-parts":[[2021,10,8]],"date-time":"2021-10-08T23:14:47Z","timestamp":1633734887000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":5,"title":["Internal Symmetries and Linear Properties: Full-permutation Distinguishers and Improved Collisions on Gimli"],"prefix":"10.1007","volume":"34","author":[{"given":"Antonio","family":"Fl\u00f3rez-Guti\u00e9rrez","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ga\u00ebtan","family":"Leurent","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mar\u00eda","family":"Naya-Plasencia","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"L\u00e9o","family":"Perrin","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Andr\u00e9","family":"Schrottenloher","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ferdinand","family":"Sibleyras","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2021,10,8]]},"reference":[{"issue":"4","key":"9413_CR1","doi-asserted-by":"publisher","first-page":"99","DOI":"10.46586\/tosc.v2017.i4.99-129","volume":"2017","author":"A Abdelkhalek","year":"2017","unstructured":"A. Abdelkhalek, Y. Sasaki, Y. Todo, M. Tolba, A.M. Youssef, MILP modeling for (large) s-boxes to optimize probability of differential characteristics. IACR Trans. Symm. Cryptol. 2017(4), 99\u2013129 (2017)","journal-title":"IACR Trans. Symm. Cryptol."},{"issue":"S1","key":"9413_CR2","doi-asserted-by":"publisher","first-page":"295","DOI":"10.46586\/tosc.v2020.iS1.295-349","volume":"2020","author":"D Bellizia","year":"2020","unstructured":"D. Bellizia, F. Berti, O. Bronchain, G. Cassiers, S. Duval, C. Guo, G. Leander, G. Leurent, I. Levi, C. Momin, O. Pereira, T. Peters, F.X. Standaert, B. Udvarhelyi, F. Wiemer, Spook: Sponge-based leakage-resistant authenticated encryption with a masked tweakable block cipher. IACR Trans. Symm. Cryptol. 2020(S1), 295\u2013349 (2020)","journal-title":"IACR Trans. Symm. Cryptol."},{"issue":"4","key":"9413_CR3","doi-asserted-by":"publisher","first-page":"766","DOI":"10.1137\/0218053","volume":"18","author":"CH Bennett","year":"1989","unstructured":"C.H. Bennett, Time\/space trade-offs for reversible computation. SIAM J. Comput. 18(4), 766\u2013776 (1989)","journal-title":"SIAM J. Comput."},{"key":"9413_CR4","doi-asserted-by":"crossref","unstructured":"D.J. Bernstein, S. K\u00f6lbl, S. Lucks, P.M.C. Massolino, F. Mendel, K. Nawaz, T. Schneider, P. Schwabe, F.X. Standaert, Y. Todo, B. Viguier, Gimli : A cross-platform permutation. In: Fischer, W., Homma, N. (eds.) CHES\u00a02017. LNCS, vol. 10529, pp. 299\u2013320. Springer, Heidelberg (Sep 2017)","DOI":"10.1007\/978-3-319-66787-4_15"},{"key":"9413_CR5","unstructured":"D.J. Bernstein, S. K\u00f6lbl, S. Lucks, P.M.C. Massolino, F. Mendel, K. Nawaz, T. Schneider, P. Schwabe, F.X. Standaert, Y. Todo, B. Viguier, Gimli. Submission to the NIST Lightweight Cryptography project. Available online https:\/\/csrc.nist.gov\/CSRC\/media\/Projects\/Lightweight-Cryptography\/documents\/round-1\/spec-doc\/gimli-spec.pdf. (2019)"},{"key":"9413_CR6","unstructured":"D.J. Bernstein, S. K\u00f6lbl, S. Lucks, P.M.C. Massolino, F. Mendel, K. Nawaz, T. Schneider, P. Schwabe, F.X. Standaert, Y. Todo, B. Viguier, Gimli: NIST LWC second-round candidate status update. Available online https:\/\/csrc.nist.gov\/CSRC\/media\/Projects\/lightweight-cryptography\/documents\/round-2\/status-update-sep2020\/gimli_update.pdf. (2020)"},{"key":"9413_CR7","unstructured":"G. Bertoni, J. Daemen, M. Peeters, G. Van\u00a0Assche, Sponge functions. In: ECRYPT hash workshop (2007)"},{"key":"9413_CR8","doi-asserted-by":"crossref","unstructured":"G. Bertoni, J. Daemen, M. Peeters, G. Van Assche, On the indifferentiability of the sponge construction. In: Smart, N.P. (ed.) EUROCRYPT\u00a02008. LNCS, vol. 4965, pp. 181\u2013197. Springer, Heidelberg (Apr 2008)","DOI":"10.1007\/978-3-540-78967-3_11"},{"key":"9413_CR9","doi-asserted-by":"crossref","unstructured":"G. Bertoni, J. Daemen, M. Peeters, G. Van Assche, Sponge-based pseudo-random number generators. In: Mangard, S., Standaert, F.X. (eds.) CHES\u00a02010. LNCS, vol. 6225, pp. 33\u201347. Springer, Heidelberg (Aug 2010)","DOI":"10.1007\/978-3-642-15031-9_3"},{"key":"9413_CR10","doi-asserted-by":"crossref","unstructured":"G. Bertoni, J. Daemen, M. Peeters, G. Van Assche, Duplexing the sponge: Single-pass authenticated encryption and other applications. In: Miri, A., Vaudenay, S. (eds.) SAC 2011. LNCS, vol. 7118, pp. 320\u2013337. Springer, Heidelberg (Aug 2012)","DOI":"10.1007\/978-3-642-28496-0_19"},{"issue":"1","key":"9413_CR11","doi-asserted-by":"publisher","first-page":"3","DOI":"10.1007\/BF00630563","volume":"4","author":"E Biham","year":"1991","unstructured":"E. Biham, A. Shamir, Differential cryptanalysis of DES-like cryptosystems. Journal of Cryptology 4(1), 3\u201372 (1991)","journal-title":"Journal of Cryptology"},{"key":"9413_CR12","doi-asserted-by":"crossref","unstructured":"A. Biryukov, C. De Canni\u00e8re, M. Quisquater, On multiple linear approximations. In: Franklin, M. (ed.) CRYPTO\u00a02004. LNCS, vol. 3152, pp. 1\u201322. Springer, Heidelberg (Aug 2004)","DOI":"10.1007\/978-3-540-28628-8_1"},{"key":"9413_CR13","doi-asserted-by":"crossref","first-page":"53","DOI":"10.1090\/conm\/305\/05215","volume":"305","author":"G Brassard","year":"2002","unstructured":"G. Brassard, P. Hoyer, M. Mosca, A. Tapp, Quantum amplitude amplification and estimation. Contemporary Mathematics\u00a0305, 53\u201374 (2002)","journal-title":"Contemporary Mathematics"},{"key":"9413_CR14","doi-asserted-by":"crossref","unstructured":"G. Brassard, P. H\u00f8yer, A. Tapp, Quantum cryptanalysis of hash and claw-free functions. In: Lucchesi, C.L., Moura, A.V. (eds.) LATIN 1998. LNCS, vol. 1380, pp. 163\u2013169. Springer, Heidelberg (Apr 1998)","DOI":"10.1007\/BFb0054319"},{"key":"9413_CR15","doi-asserted-by":"crossref","unstructured":"J. Cai, Z. Wei, Y. Zhang, S. Sun, L. Hu, Zero-sum distinguishers for round-reduced Gimli permutation. In: Mori, P., Furnell, S., Camp, O. (eds.) Proceedings of the 5th International Conference on Information Systems Security and Privacy, ICISSP 2019, Prague, Czech Republic, February 23-25, 2019. pp. 38\u201343. SciTePress (2019)","DOI":"10.5220\/0007249000380043"},{"key":"9413_CR16","doi-asserted-by":"crossref","unstructured":"P. Derbez, P. Huynh, V. Lallemand, M. Naya-Plasencia, L. Perrin, A. Schrottenloher, Cryptanalysis results on Spook - bringing full-round Shadow-512 to the light. In: Micciancio, D., Ristenpart, T. (eds.) CRYPTO\u00a02020, Part\u00a0III. LNCS, vol. 12172, pp. 359\u2013388. Springer, Heidelberg (Aug 2020)","DOI":"10.1007\/978-3-030-56877-1_13"},{"key":"9413_CR17","doi-asserted-by":"crossref","unstructured":"D. Dinu, L. Perrin, A. Udovenko, V. Velichkov, J. Gro\u00dfsch\u00e4dl, A. Biryukov, Design strategies for ARX with provable bounds: Sparx and LAX. In: Cheon, J.H., Takagi, T. (eds.) ASIACRYPT\u00a02016, Part\u00a0I. LNCS, vol. 10031, pp. 484\u2013513. Springer, Heidelberg (Dec 2016)","DOI":"10.1007\/978-3-662-53887-6_18"},{"key":"9413_CR18","doi-asserted-by":"crossref","unstructured":"A. Fl\u00f3rez-Guti\u00e9rrez, G. Leurent, M. Naya-Plasencia, L. Perrin, A. Schrottenloher, F. Sibleyras, New results on Gimli: full-permutation distinguishers and improved collisions. In: Moriai, S., Wang, H. (eds.) ASIACRYPT\u00a02020, Part\u00a0I. LNCS, vol. 12491, pp. 33\u201363. Springer, Heidelberg (Dec 2020)","DOI":"10.1007\/978-3-030-64837-4_2"},{"key":"9413_CR19","doi-asserted-by":"crossref","unstructured":"H. Gilbert, A simplified representation of AES. In: Sarkar, P., Iwata, T. (eds.) ASIACRYPT\u00a02014, Part\u00a0I. LNCS, vol. 8873, pp. 200\u2013222. Springer, Heidelberg (Dec 2014)","DOI":"10.1007\/978-3-662-45611-8_11"},{"key":"9413_CR20","doi-asserted-by":"crossref","unstructured":"H. Gilbert, T. Peyrin, Super-sbox cryptanalysis: Improved attacks for AES-like permutations. In: Hong, S., Iwata, T. (eds.) FSE\u00a02010. LNCS, vol. 6147, pp. 365\u2013383. Springer, Heidelberg (Feb 2010)","DOI":"10.1007\/978-3-642-13858-4_21"},{"key":"9413_CR21","unstructured":"A. Gleixner, M. Bastubbe, L. Eifler, T. Gally, G. Gamrath, R.L. Gottwald, G. Hendel, C. Hojny, T. Koch, M.E. L\u00fcbbecke, S.J. Maher, M. Miltenberger, B. M\u00fcller, M.E. Pfetsch, C. Puchert, D. Rehfeldt, F. Schl\u00f6sser, C. Schubert, F. Serrano, Y. Shinano, J.M. Viernickel, M. Walter, F. Wegscheider, J.T. Witt, J. Witzig, The SCIP Optimization Suite 6.0. Technical report, Optimization Online (July 2018), http:\/\/www.optimization-online.org\/DB_HTML\/2018\/07\/6692.html"},{"key":"9413_CR22","unstructured":"A. Gleixner, M. Bastubbe, L. Eifler, T. Gally, G. Gamrath, R.L. Gottwald, G. Hendel, C. Hojny, T. Koch, M.E. L\u00fcbbecke, S.J. Maher, M. Miltenberger, B. M\u00fcller, M.E. Pfetsch, C. Puchert, D. Rehfeldt, F. Schl\u00f6sser, C. Schubert, F. Serrano, Y. Shinano, J.M. Viernickel, M. Walter, F. Wegscheider, J.T. Witt, J. Witzig, The SCIP Optimization Suite 6.0. ZIB-Report 18-26, Zuse Institute Berlin (July 2018), http:\/\/nbn-resolving.de\/urn:nbn:de:0297-zib-69361"},{"key":"9413_CR23","doi-asserted-by":"crossref","unstructured":"L.K. Grover, A fast quantum mechanical algorithm for database search. In: 28th ACM STOC. pp. 212\u2013219. ACM Press (May 1996)","DOI":"10.1145\/237814.237866"},{"key":"9413_CR24","unstructured":"M. Hamburg, Cryptanalysis of 22 1\/2 rounds of Gimli. Cryptology ePrint Archive, Report 2017\/743 (2017), https:\/\/eprint.iacr.org\/2017\/743"},{"key":"9413_CR25","doi-asserted-by":"crossref","unstructured":"A. Hosoyamada, Y. Sasaki, Finding hash collisions with quantum computers by using differential trails with smaller probability than birthday bound. In: Canteaut, A., Ishai, Y. (eds.) EUROCRYPT\u00a02020, Part\u00a0II. LNCS, vol. 12106, pp. 249\u2013279. Springer, Heidelberg (May 2020)","DOI":"10.1007\/978-3-030-45724-2_9"},{"key":"9413_CR26","series-title":"LNCS","first-page":"504","volume-title":"ASIACRYPT 2013, Part II","author":"M Iwamoto","year":"2013","unstructured":"M. Iwamoto, T. Peyrin, Y. Sasaki, Limited-birthday distinguishers for hash functions - collisions beyond the birthday bound can be meaningful. In: Sako, K., Sarkar, P. (eds.) ASIACRYPT\u00a02013, Part\u00a0II. LNCS, vol. 8270, pp. 504\u2013523. Springer, Heidelberg (Dec 2013)"},{"key":"9413_CR27","series-title":"LNCS","doi-asserted-by":"publisher","first-page":"280","DOI":"10.1007\/978-3-030-45724-2_10","volume-title":"EUROCRYPT 2020, Part II","author":"S Jaques","year":"2020","unstructured":"S. Jaques, M. Naehrig, M. Roetteler, F. Virdia, Implementing grover oracles for quantum key search on AES and LowMC. In: Canteaut, A., Ishai, Y. (eds.) EUROCRYPT\u00a02020, Part\u00a0II. LNCS, vol. 12106, pp. 280\u2013310. Springer, Heidelberg (May 2020)"},{"key":"9413_CR28","unstructured":"E. Knill, An analysis of Bennett\u2019s pebble game. CoRR arXiv:abs\/math\/9508218 (1995)"},{"issue":"2","key":"9413_CR29","doi-asserted-by":"publisher","first-page":"257","DOI":"10.1007\/s00145-013-9166-5","volume":"28","author":"M Lamberger","year":"2015","unstructured":"M. Lamberger, F. Mendel, M. Schl\u00e4ffer, C. Rechberger, V. Rijmen, The rebound attack and subspace distinguishers: Application to Whirlpool. Journal of Cryptology 28(2), 257\u2013296 (2015)","journal-title":"Journal of Cryptology"},{"key":"9413_CR30","series-title":"LNCS","doi-asserted-by":"publisher","first-page":"344","DOI":"10.1007\/978-3-662-49890-3_14","volume-title":"EUROCRYPT 2016, Part I","author":"G Leurent","year":"2016","unstructured":"G. Leurent, Improved differential-linear cryptanalysis of 7-round Chaskey with partitioning. In: Fischlin, M., Coron, J.S. (eds.) EUROCRYPT\u00a02016, Part\u00a0I. LNCS, vol. 9665, pp. 344\u2013371. Springer, Heidelberg (May 2016)"},{"key":"9413_CR31","doi-asserted-by":"crossref","unstructured":"R.Y. Levin, A.T. Sherman, A note on Bennett\u2019s time-space tradeoff for reversible computation. SIAM J. Comput.\u00a019(4), 673\u2013677 (1990)","DOI":"10.1137\/0219046"},{"key":"9413_CR32","unstructured":"F. Liu, T. Isobe, W. Meier, Preimages and collisions for up to 5-round Gimli-Hash using divide-and-conquer methods. Cryptology ePrint Archive, Report 2019\/1080 (2019), https:\/\/eprint.iacr.org\/2019\/1080"},{"key":"9413_CR33","series-title":"LNCS","first-page":"219","volume-title":"CRYPTO 2020, Part III","author":"F Liu","year":"2020","unstructured":"F. Liu, T. Isobe, W. Meier, Automatic verification of differential characteristics: Application to reduced Gimli. In: Micciancio, D., Ristenpart, T. (eds.) CRYPTO\u00a02020, Part\u00a0III. LNCS, vol. 12172, pp. 219\u2013248. Springer, Heidelberg (Aug 2020)"},{"key":"9413_CR34","unstructured":"F. Liu, T. Isobe, W. Meier, Exploiting weak diffusion of Gimli: A full-round distinguisher and reduced-round preimage attacks. Cryptology ePrint Archive, Report 2020\/561 (2020), https:\/\/eprint.iacr.org\/2020\/561"},{"key":"9413_CR35","series-title":"LNCS","first-page":"386","volume-title":"EUROCRYPT\u201993","author":"M Matsui","year":"1994","unstructured":"M. Matsui, Linear cryptanalysis method for DES cipher. In: Helleseth, T. (ed.) EUROCRYPT\u201993. LNCS, vol. 765, pp. 386\u2013397. Springer, Heidelberg (May 1994)"},{"key":"9413_CR36","unstructured":"M.A. Nielsen, I.L. Chuang, Quantum information and quantum computation. Cambridge: Cambridge University Press 2(8), \u00a023 (2000)"},{"key":"9413_CR37","series-title":"LNCS","first-page":"439","volume-title":"EUROCRYPT\u201994","author":"K Nyberg","year":"1995","unstructured":"K. Nyberg, Linear approximation of block ciphers (rump session). In: Santis, A.D. (ed.) EUROCRYPT\u201994. LNCS, vol. 950, pp. 439\u2013444. Springer, Heidelberg (May 1995)"},{"key":"9413_CR38","doi-asserted-by":"crossref","unstructured":"M. Soos, K. Nohl, C. Castelluccia, Extending SAT solvers to cryptographic problems. In: Kullmann, O. (ed.) Theory and Applications of Satisfiability Testing - SAT 2009, 12th International Conference, SAT 2009, Swansea, UK, June 30 - July 3, 2009. Proceedings. Lecture Notes in Computer Science, vol. 5584, pp. 244\u2013257. Springer (2009)","DOI":"10.1007\/978-3-642-02777-2_24"},{"key":"9413_CR39","unstructured":"R. Zong, X. Dong, X. Wang, Collision attacks on round-reduced Gimli-Hash\/Ascon-Xof\/Ascon-Hash. Cryptology ePrint Archive, Report 2019\/1115 (2019), https:\/\/eprint.iacr.org\/2019\/1115"}],"container-title":["Journal of Cryptology"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s00145-021-09413-z.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s00145-021-09413-z\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s00145-021-09413-z.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,12,21]],"date-time":"2021-12-21T16:06:04Z","timestamp":1640102764000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s00145-021-09413-z"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,10]]},"references-count":39,"journal-issue":{"issue":"4","published-print":{"date-parts":[[2021,10]]}},"alternative-id":["9413"],"URL":"https:\/\/doi.org\/10.1007\/s00145-021-09413-z","relation":{},"ISSN":["0933-2790","1432-1378"],"issn-type":[{"value":"0933-2790","type":"print"},{"value":"1432-1378","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021,10]]},"assertion":[{"value":"1 January 2021","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"15 September 2021","order":2,"name":"revised","label":"Revised","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"16 September 2021","order":3,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"8 October 2021","order":4,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}}],"article-number":"45"}}