{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,10]],"date-time":"2026-02-10T06:02:30Z","timestamp":1770703350692,"version":"3.49.0"},"reference-count":51,"publisher":"Springer Science and Business Media LLC","issue":"2","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Des. Codes Cryptogr."],"published-print":{"date-parts":[[2011,8]]},"DOI":"10.1007\/s10623-010-9421-9","type":"journal-article","created":{"date-parts":[[2010,8,9]],"date-time":"2010-08-09T13:14:25Z","timestamp":1281359665000},"page":"123-143","source":"Crossref","is-referenced-by-count":4,"title":["The (related-key) impossible boomerang attack and its application to the AES block cipher"],"prefix":"10.1007","volume":"60","author":[{"given":"Jiqiang","family":"Lu","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2010,8,10]]},"reference":[{"issue":"2","key":"9421_CR1","doi-asserted-by":"crossref","first-page":"28","DOI":"10.1049\/iet-ifs:20070078","volume":"2","author":"B. Bahrak","year":"2008","unstructured":"Bahrak B., Aref M.R.: Impossible differential attack on seven-round AES-128. IET Inform. Secur. 2(2), 28\u201332 (2008)","journal-title":"IET Inform. Secur."},{"key":"9421_CR2","unstructured":"Biham E.: New types of cryptanalytic attacks using related keys. In: EUROCRYPT 1993. Lecture Notes in Computer Science, vol. 765, pp. 398\u2013409. Springer, Heidelberg (1993)."},{"key":"9421_CR3","unstructured":"Biham E., Biryukov A., Shamir A.: Cryptanalysis of Skipjack reduced to 31 rounds using impossible differentials. In: EUROCRYPT 1999. Lecture Notes in Computer Science, vol. 1592, pp. 12\u201323. Springer, Heidelberg (1999)."},{"key":"9421_CR4","unstructured":"Biham E., Biryukov A., Shamir A.: Miss in the middle attacks on IDEA and Khufu. In: FSE 1999. Lecture Notes in Computer Science, vol. 1636, pp. 124\u2013138. Springer, Heidelberg (1999)."},{"key":"9421_CR5","unstructured":"Biham E., Dunkelman O., Keller N.: The rectangle attack\u2014rectangling the Serpent. In: EUROCRYPT 2001. Lecture Notes in Computer Science, vol. 2045, pp. 340\u2013357. Springer, Heidelberg (2001)."},{"key":"9421_CR6","unstructured":"Biham E., Dunkelman O., Keller N.: Enhancing differential-linear cryptanalysis. In: ASIACRYPT 2002. Lecture Notes in Computer Science, vol. 2501, pp. 254\u2013266. Springer, Heidelberg (2002)."},{"key":"9421_CR7","unstructured":"Biham E., Dunkelman O., Keller N.: New combined attacks on block ciphers. In: FSE 2005. Lecture Notes in Computer Science, vol. 3557, pp. 126\u2013144. Springer, Heidelberg (2005)."},{"key":"9421_CR8","unstructured":"Biham E., Dunkelman O., Keller N.: Related-key boomerang and rectangle attacks. In: EUROCRYPT 2005. Lecture Notes in Computer Science, vol. 3494, pp. 507\u2013525. Springer, Heidelberg (2005)."},{"key":"9421_CR9","unstructured":"Biham E., Dunkelman O., Keller N.: A related-key rectangle attack on the full KASUMI. In: ASIACRYPT 2005. Lecture Notes in Computer Science, vol. 3788, pp. 443\u2013461. Springer, Heidelberg (2005)."},{"key":"9421_CR10","unstructured":"Biham E., Dunkelman O., Keller N.: Related-key impossible differential attacks on 8-round AES-192. In: CT-RSA 2006. Lecture Notes in Computer Science, vol. 3860, pp. 21\u201333. Springer, Heidelberg (2006)."},{"key":"9421_CR11","unstructured":"Biham E., Shamir A.: Differential cryptanalysis of DES-like cryptosystems. In: CRYPTO 1990. Lecture Notes in Computer Science, vol. 537, pp. 2\u201321. Springer, Heidelberg (1990)."},{"key":"9421_CR12","unstructured":"Biryukov A.: The boomerang attack on 5 and 6-round reduced AES. In: AES 2004. Lecture Notes in Computer Science, vol. 3373, pp. 11\u201315. Springer, Heidelberg (2005)."},{"key":"9421_CR13","unstructured":"Biryukov A., Dunkelman O., Keller N., Khovratovich D., Shamir A.: Key recovery attacks of practical complexity on AES-256 variants with up to 10 rounds. In: EUROCRYPT 2010. Lecture Notes in Computer Science, vol. 6110, pp. 299\u2013319. Springer, Heidelberg (2010)."},{"key":"9421_CR14","unstructured":"Biryukov A., Khovratovich D.: Related-key cryptanalysis of the full AES-192 and AES-256. In: ASIACRYPT 2009. Lecture Notes in Computer Science, vol. 5912, pp. 1\u201318. Springer, Heidelberg (2009)."},{"key":"9421_CR15","unstructured":"Biryukov A., Khovratovich D, Nikolic I.: Distinguisher and related-key attack on the full AES-256. In: CRYPTO 2009. Lecture Notes in Computer Science, vol. 5677, pp. 231\u2013249. Springer, Heidelberg (2009)."},{"key":"9421_CR16","unstructured":"Cheon J., Kim M., Kim K., Lee J.: Improved impossible differential cryptanalysis of Rijndael and Crypton. In: ICISC 2001. Lecture Notes in Computer Science, vol. 2288, pp. 39\u201349. Springer, Heidelberg (2001)."},{"key":"9421_CR17","unstructured":"Daemen J., Knudsen L.R., Rijmen V.: The block cipher Square. In: FSE 1997. Lecture Notes in Computer Science, vol. 1267, pp. 149\u2013165. Springer, Heidelberg (1997)."},{"key":"9421_CR18","unstructured":"Daemen J., Rijmen V.: AES proposal: rijndael. In: The First Advanced Encryption Standard Candidate Conference. NIST, Ventura, CA (1998)."},{"key":"9421_CR19","unstructured":"Demirci H., Selcuk A.A.: A meet-in-the-middle attack on 8-round AES. In: FSE 2008. Lecture Notes in Computer Science, vol. 5086, pp. 116\u2013126. Springer, Heidelberg (2008)."},{"key":"9421_CR20","unstructured":"Dunkelman O., Keller N.: An improved impossible differential attack on MISTY1. In: Advances in Cryptology\u2014ASIACRYPT 2008. Lecture Notes in Computer Science, vol. 5350, pp. 441\u2013454. Springer, Heidelberg (2008)."},{"key":"9421_CR21","unstructured":"Ferguson N., Kelsey J., Lucks S., Schneier B., Stay M., Wagner D., Whiting D.: Improved cryptanalysis of Rijndael. In: FSE 2000. Lecture Notes in Computer Science, vol. 1978, pp. 213\u2013230. Springer, Heidelberg (2001)."},{"key":"9421_CR22","unstructured":"Fleischmann E., Gorski M., Lucks S.: Attacking 9 and 10 rounds of AES-256. In: ACISP 2009. Lecture Notes in Computer Science, vol. 5594, pp. 60\u201372. Springer, Heidelberg (2009)."},{"key":"9421_CR23","unstructured":"Gilbert H., Minier M.: A collision attack on 7 rounds of Rijndael. In: The Third Advanced Encryption Standard Candidate Conference, pp. 230\u2013241. NIST, Ventura, CA (2000)."},{"key":"9421_CR24","unstructured":"Hong S., Kim J., Lee S., Preneel B.: Related-key rectangle attacks on reduced versions of SHACAL-1 and AES-192. In: FSE 2005. Lecture Notes in Computer Science, vol. 3557, pp. 368\u2013383. Springer, Heidelberg (2005)."},{"key":"9421_CR25","unstructured":"International Organization for Standardization (ISO): ISO\/IEC 18033-3:2005: Information technology\u2014Security techniques\u2014Encryption algorithms\u2014Part 3: block ciphers. ISO, Geneva (2005)."},{"key":"9421_CR26","unstructured":"Jakimoski G., Desmedt Y.: Related-key differential cryptanalysis of 192-bit key AES variants. In: SAC 2003. Lecture Notes in Computer Science, vol. 3006, pp. 208\u2013221. Springer, Heidelberg (2004)."},{"key":"9421_CR27","unstructured":"Kelsey J., Kohno T., Schneier B.: Amplified boomerang attacks against reduced-round MARS and Serpent. In: FSE 2000. Lecture Notes in Computer Science, vol. 1978, pp. 75\u201393. Springer, Heidelberg (2001)."},{"key":"9421_CR28","unstructured":"Kelsey J., Schneier B., Wagner D.: Key-schedule cryptanalysis of IDEA, G-DES, GOST, SAFER, and Triple-DES. In: CRYPTO 1996. Lecture Notes in Computer Science, vol. 1109, pp. 237\u2013251. Springer, Heidelberg (1996)."},{"key":"9421_CR29","unstructured":"Kim J., Hong S., Preneel B.: Related-key rectangle attacks on reduced AES-192 and AES-256. In: FSE 2007. Lecture Notes in Computer Science, vol. 4593, pp. 225\u2013241. Springer, Heidelberg (2007)."},{"key":"9421_CR30","unstructured":"Kim J., Kim G., Hong S., Lee S., Hong D.: The related-key rectangle attack\u2014application to SHACAL-1. In: ACISP 2004. Lecture Notes in Computer Science, vol. 3108, pp. 123\u2013136. Springer, Heidelberg (2004)."},{"key":"9421_CR31","unstructured":"Knudsen L.R.: Cryptanalysis of LOKI91. In: AUSCRYPT 1992. Lecture Notes in Computer Science, vol. 718, pp. 196\u2013208. Springer, Heidelberg (1993)."},{"key":"9421_CR32","unstructured":"Knudsen L.R.: Trucated and higher order differentials. In: FSE 1994. Lecture Notes in Computer Science, vol. 1008, pp. 196\u2013211. Springer, Heidelberg (1995)."},{"key":"9421_CR33","unstructured":"Knudsen L.R.: DEAL\u2014a 128-bit block cipher. Technical report, Department of Informatics, University of Bergen, Norway (1998)."},{"key":"9421_CR34","unstructured":"Langford S.K., Hellman M.E.: Differential-linear cryptanalysis. In: CRYPTO 1994. Lecture Notes in Computer Science, vol. 839, pp. 17\u201325. Springer, Heidelberg (1994)."},{"key":"9421_CR35","unstructured":"Lu J.: Cryptanalysis of block ciphers. PhD Thesis, The University of London, UK (2008). A copy is available online as Technical Report RHUL-MA-2008-19, Department of Mathematics, Royal Holloway, University of London, UK. http:\/\/www.ma.rhul.ac.uk\/static\/techrep\/2008\/RHUL-MA-2008-19.pdf (2008)."},{"key":"9421_CR36","unstructured":"Lu J., Dunkelman O., Keller N., Kim J.: New impossible differential attacks on AES, In: INDOCRYPT 2008. Lecture Notes in Computer Science, vol. 5365, pp. 279\u2013293. Springer, Heidelberg (2008)."},{"key":"9421_CR37","doi-asserted-by":"crossref","first-page":"2588","DOI":"10.1093\/ietfec\/e91-a.9.2588","volume":"91(A)","author":"J. Lu","year":"2008","unstructured":"Lu J., Kim J.: Attacking 44 rounds of the SHACAL-2 block cipher using related-key rectangle cryptanalysis. IEICE Trans. Fundam. Electron. Commun. Comput. Sci. 91(A), 2588\u20132596 (2008)","journal-title":"IEICE Trans. Fundam. Electron. Commun. Comput. Sci."},{"key":"9421_CR38","unstructured":"Lu J., Kim J., Keller N., Dunkelman O.: Related-key rectangle attack on 42-round SHACAL-2. In: ISC 2006. Lecture Notes in Computer Science, vol. 4176, pp. 85\u2013100. Springer, Heidelberg (2006)."},{"key":"9421_CR39","unstructured":"Lu J., Kim J., Keller N., Dunkelman O.: Improving the efficiency of impossible differential cryptanalysis of reduced Camellia and MISTY1. In: CT-RSA 2008. Lecture Notes in Computer Science, vol. 4964, pp. 370\u2013386. Springer, Heidelberg (2008)."},{"key":"9421_CR40","unstructured":"Lucks S.: Attacking seven rounds of Rijndael under 192-bit and 256-bit keys. In: The Third Advanced Encryption Standard Candidate Conference, pp. 215\u2013229. NIST, Ventura, CA (2000)."},{"key":"9421_CR41","unstructured":"Matsui M.: Linear cryptanalysis method for DES cipher. In: EUROCRYPT 1993. Lecture Notes in Computer Science, vol. 765, pp. 386\u2013397. Springer, Heidelberg (1994)."},{"key":"9421_CR42","unstructured":"Murphy S.: The return of the boomerang. Technical Report RHUL-MA-2009-20, Department of Mathematics, Royal Holloway, University of London, UK. http:\/\/www.ma.rhul.ac.uk\/static\/techrep\/2009\/RHUL-MA-2009-20.pdf (2009)."},{"key":"9421_CR43","unstructured":"National Institute of Standards and Technology (NIST). Advanced Encryption Standard (AES). FIPS-197 (2001)."},{"key":"9421_CR44","unstructured":"NIST: National Institute of Standards and Technology. http:\/\/www.nist.gov ."},{"issue":"1","key":"9421_CR45","doi-asserted-by":"crossref","first-page":"33","DOI":"10.1016\/j.ipl.2004.02.018","volume":"91","author":"R. Phan","year":"2004","unstructured":"Phan R.: Impossible differential cryptanalysis of 7-round advanced encryption standard (AES). Inform. Process. Lett. 91(1), 33\u201338 (2004)","journal-title":"Inform. Process. Lett."},{"key":"9421_CR46","unstructured":"Wagner D.: The boomerang attack. In: FSE 1999. Lecture Notes in Computer Science, vol. 1636, pp. 156\u2013170. Springer, Heidelberg (1999)."},{"key":"9421_CR47","unstructured":"Wang G., Keller N., Dunkelman O.: The delicate issues of addition with respect to XOR differences. In: SAC 2007. Lecture Notes in Computer Science, vol. 4876, pp. 212\u2013231. Springer, Heidelberg (2007)."},{"key":"9421_CR48","unstructured":"Zhang W., Wu W., Zhang L., Feng D.: Improved related-key impossible differential attacks on reduced-round AES-192. In: SAC 2006. Lecture Notes in Computer Science, vol. 4356, pp. 15\u201327. Springer, Heidelberg (2007)."},{"key":"9421_CR49","doi-asserted-by":"crossref","unstructured":"Zhang W., Wu W., Zhang L.: Related-key impossible differential attacks on reduced-round AES-256. J. Softw. 18(11), 2893\u20132901. http:\/\/www.lois.cn\/LOIS-AES\/data\/AES-256.pdf (2007).","DOI":"10.1360\/jos182893"},{"key":"9421_CR50","unstructured":"Zhang W., Wu W., Feng D.: New results on impossible differential cryptanalysis of reduced AES. In: ICISC 2007. Lecture Notes in Computer Science, vol. 4817, pp. 239\u2013250. Springer, Heidelberg (2007)."},{"key":"9421_CR51","unstructured":"Zhang W., Zhang L., Wu W., Feng D.: Related-key differential-linear attacks on reduced AES-192. In: INDOCRYPT 2007. Lecture Notes in Computer Science, vol. 4859, pp. 73\u201385. Springer, Heidelberg (2007)."}],"container-title":["Designs, Codes and Cryptography"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/www.springerlink.com\/index\/pdf\/10.1007\/s10623-010-9421-9","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,6,1]],"date-time":"2019-06-01T13:12:37Z","timestamp":1559394757000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/s10623-010-9421-9"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2010,8,10]]},"references-count":51,"journal-issue":{"issue":"2","published-print":{"date-parts":[[2011,8]]}},"alternative-id":["9421"],"URL":"https:\/\/doi.org\/10.1007\/s10623-010-9421-9","relation":{},"ISSN":["0925-1022","1573-7586"],"issn-type":[{"value":"0925-1022","type":"print"},{"value":"1573-7586","type":"electronic"}],"subject":[],"published":{"date-parts":[[2010,8,10]]}}}