{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,30]],"date-time":"2026-09-30T12:50:24Z","timestamp":1790772624445,"version":"4.1.0"},"reference-count":37,"publisher":"Springer Science and Business Media LLC","issue":"1","license":[{"start":{"date-parts":[[2019,8,27]],"date-time":"2019-08-27T00:00:00Z","timestamp":1566864000000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2019,8,27]],"date-time":"2019-08-27T00:00:00Z","timestamp":1566864000000},"content-version":"vor","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Des. Codes Cryptogr."],"published-print":{"date-parts":[[2020,1]]},"DOI":"10.1007\/s10623-019-00673-2","type":"journal-article","created":{"date-parts":[[2019,8,27]],"date-time":"2019-08-27T15:05:46Z","timestamp":1566918346000},"page":"91-117","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":7,"title":["Troika: a ternary cryptographic hash function"],"prefix":"10.1007","volume":"88","author":[{"given":"Stefan","family":"K\u00f6lbl","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2031-8652","authenticated-orcid":false,"given":"Elmar","family":"Tischhauser","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Patrick","family":"Derbez","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Andrey","family":"Bogdanov","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2019,8,27]]},"reference":[{"key":"673_CR1","doi-asserted-by":"publisher","first-page":"647","DOI":"10.1007\/978-3-319-63715-0_22","volume-title":"Advances in Cryptology \u2013 CRYPTO 2017","author":"Christof Beierle","year":"2017","unstructured":"Beierle C., Canteaut A., Leander G., Rotella Y.: Proving resistance against invariant attacks: How to choose the round constants. In: Katz J., Shacham H., (eds) Advances in Cryptology\u2014CRYPTO 2017\u201437th Annual International Cryptology Conference, Santa Barbara, CA, USA, August 20\u201324, 2017, Proceedings, Part II, vol. 10402. Lecture Notes in Computer Science, pp. 647\u2013678. Springer, New York (2017)."},{"key":"673_CR2","doi-asserted-by":"publisher","first-page":"181","DOI":"10.1007\/978-3-540-78967-3_11","volume-title":"Advances in Cryptology \u2013 EUROCRYPT 2008","author":"Guido Bertoni","year":"2008","unstructured":"Bertoni G., Daemen J., Peeters M., Van Assche G.: On the indifferentiability of the Sponge construction. In: Smart, Nigel\u00a0P. (ed.) EUROCRYPT. Lecture Notes in Computer Science, vol. 4965, pp. 181\u2013197. Springer, New York (2008)."},{"key":"673_CR3","unstructured":"Bertoni G., Daemen J., Peeters M., Van Assche G.: Keccak sponge function family main document. Submission to NIST SHA-3 competition (Round 3). http:\/\/keccak.noekeon.org\/ (2011)."},{"key":"673_CR4","doi-asserted-by":"publisher","first-page":"320","DOI":"10.1007\/978-3-642-28496-0_19","volume-title":"Selected Areas in Cryptography","author":"Guido Bertoni","year":"2012","unstructured":"Bertoni G., Daemen J., Peeters M., Van Assche G.: Duplexing the sponge: single-pass authenticated encryption and other applications. In: Miri A, Vaudenay S, (eds.) Selected areas in cryptography\u201418th International Workshop, SAC 2011, Toronto, ON, Canada, August 11\u201312, 2011, Revised Selected Papers. Lecture Notes in Computer Science, vol. 7118, pp. 320\u2013337. Springer, New York (2011)."},{"key":"673_CR5","unstructured":"Bertoni G., Daemen J., Peeters M., Van Assche G.: Cryptographic sponge functions, version 0.1. https:\/\/keccak.team\/files\/CSF-0.1.pdf (2011)."},{"key":"673_CR6","unstructured":"Bertoni G., Daemen J., Peeters M., Van Assche G.: The Keccak reference, version 3.0. Submission to NIST (SHA-3 competition, final round) (2011)."},{"issue":"1","key":"673_CR7","doi-asserted-by":"publisher","first-page":"3","DOI":"10.1007\/BF00630563","volume":"4","author":"E Biham","year":"1991","unstructured":"Biham E., Shamir A.: Differential cryptanalysis of DES-like cryptosystems. J. Cryptol. 4(1), 3\u201372 (1991).","journal-title":"J. Cryptol."},{"key":"673_CR8","unstructured":"Biryukov A., Wagner D.A.: Slide attacks. In: Knudsen, L.R., (eds.) Fast Software Encryption, 6th International Workshop, FSE \u201999, Rome, Italy, March 24\u201326, 1999, Proceedings. Lecture Notes in Computer Science, vol. 1636, pp. 245\u2013259. Springer, New York (1999)."},{"key":"673_CR9","unstructured":"Bogdanov A., Knudsen L., Leander G., Paar C., Poschmann A., Robshaw M.J.B., Seurin Y., Vikkelsoe C.: PRESENT: an ultra-lightweight block cipher. In: Paillier P., Verbauwhede I., (eds.) CHES. Lecture Notes in Computer Science, vol. 4727, pp. 450\u2013466. Springer, New York (2007)."},{"issue":"1","key":"673_CR10","doi-asserted-by":"publisher","first-page":"53","DOI":"10.1007\/s10623-012-9620-7","volume":"69","author":"G Chen","year":"2013","unstructured":"Chen G., Li R.: Ternary self-orthogonal codes of dual distance three and ternary quantum codes of distance three. Des. Codes Cryptogr. 69(1), 53\u201363 (2013).","journal-title":"Des. Codes Cryptogr."},{"key":"673_CR11","unstructured":"Daemen J.: Cipher and hash function design strategies based on linear and differential cryptanalysis. PhD thesis, Katholieke Universiteit Leuven, Leuven, Belgium (1995)"},{"key":"673_CR12","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-04722-4","volume-title":"The Design of Rijndael: AES\u2014The Advanced Encryption Standard","author":"J Daemen","year":"2002","unstructured":"Daemen J., Rijmen V.: The Design of Rijndael: AES\u2014The Advanced Encryption Standard. Springer, New York (2002)."},{"issue":"1","key":"673_CR13","doi-asserted-by":"publisher","first-page":"65","DOI":"10.1023\/A:1008303310011","volume":"22","author":"J Daemen","year":"2001","unstructured":"Daemen J., Knudsen L.R., Rijmen V.: Linear frameworks for block ciphers. Des. Codes Cryptogr. 22(1), 65\u201387 (2001).","journal-title":"Des. Codes Cryptogr."},{"key":"673_CR14","unstructured":"Gauravaram P., Knudsen L.R., Matusiewicz K., Mendel F., Rechberger C., Schl\u00e4ffer M., Thomsen S.S.: Gr\u00f8stl\u2014a SHA-3 candidate. Submission to NIST (SHA-3 competition, final round) (2011)."},{"key":"673_CR15","doi-asserted-by":"publisher","first-page":"57","DOI":"10.1007\/11799313_5","volume-title":"Fast Software Encryption","author":"Louis Granboulan","year":"2006","unstructured":"Granboulan L., Levieil \u00c9., Piret G.: Pseudorandom permutation families over abelian groups. In: Robshaw M.J.B. (ed.) Fast Software Encryption, 13th International Workshop, FSE 2006, Graz, Austria, March 15\u201317, 2006, Revised Selected Papers. Lecture Notes in Computer Science, vol. 4047, pp. 57\u201377. Springer, New York (2006)."},{"issue":"1","key":"673_CR16","doi-asserted-by":"publisher","first-page":"81","DOI":"10.1007\/BF00124211","volume":"2","author":"PP Greenough","year":"1992","unstructured":"Greenough P.P., Hill R.: Optimal ternary quasi-cyclic codes. Des. Codes Cryptogr. 2(1), 81\u201391 (1992).","journal-title":"Des. Codes Cryptogr."},{"key":"673_CR17","unstructured":"Heilman E., Narula N., Tanzer G., Lovejoy J., Colavita M., Virza M., Dryja T.: Cryptanalysis of Curl-P and Other Attacks on the IOTA Cryptocurrency. BlackHat, USA 2018 (2018)."},{"key":"673_CR18","unstructured":"Helleseth T., Kholosha A.: New ternary binomial bent functions. In: IEEE International Symposium on Information Theory, ISIT 2016, Barcelona, Spain, July 10\u201315, 2016, pp. 101\u2013104. IEEE (2016)."},{"issue":"2","key":"673_CR19","doi-asserted-by":"publisher","first-page":"137","DOI":"10.1007\/BF00124893","volume":"2","author":"R Hill","year":"1992","unstructured":"Hill R., Newton D.E.: Optimal ternary linear codes. Des. Codes Cryptogr. 2(2), 137\u2013157 (1992).","journal-title":"Des. Codes Cryptogr."},{"key":"673_CR20","unstructured":"Hong D., Lee J.-K., Kim D.-C., Kwon D., Ryu K.H., Lee D.: LEA: a 128-bit block cipher for fast encryption on common processors. In: Kim Y., Lee H., Perrig A. (eds.) Information Security Applications\u201414th International Workshop, WISA 2013, Jeju Island, Korea, August 19\u201321, 2013, Revised Selected Papers. Lecture Notes in Computer Science, vol. 8267, pp. 3\u201327. Springer, New York (2013)."},{"key":"673_CR21","first-page":"46","volume-title":"Lecture Notes in Computer Science","author":"Deukjo Hong","year":"2006","unstructured":"Hong D., Sung J., Hong S., Lim J., Lee S., Koo B., Lee C., Chang D., Lee J., Jeong K., Kim H., Kim J., Chee S.: HIGHT: A new block cipher suitable for low-resource device. In: Goubin L., Matsui M. (eds.) Cryptographic Hardware and Embedded Systems\u2014CHES 2006, 8th International Workshop, Yokohama, Japan, October 10\u201313, 2006, Proceedings. Lecture Notes in Computer Science, , vol. 4249, pp. 46\u201359. Springer, New York (2006)."},{"key":"673_CR22","unstructured":"K\u00f6lbl S.: CryptoSMT: an easy to use tool for cryptanalysis of symmetric primitives. https:\/\/github.com\/kste\/cryptosmt ."},{"key":"673_CR23","doi-asserted-by":"publisher","first-page":"206","DOI":"10.1007\/978-3-642-22792-9_12","volume-title":"Advances in Cryptology \u2013 CRYPTO 2011","author":"Gregor Leander","year":"2011","unstructured":"Leander G., Abdelraheem M.A., AlKhzaimi H., Zenner E.: A cryptanalysis of printcipher: the invariant subspace attack. In: Rogaway P. (ed.) Advances in Cryptology\u2014CRYPTO 2011\u201431st Annual Cryptology Conference, Santa Barbara, CA, USA, August 14\u201318, 2011. Proceedings. Lecture Notes in Computer Science, vol. 6841, pp. 206\u2013221. Springer, New York (2011)."},{"key":"673_CR24","doi-asserted-by":"crossref","unstructured":"Lidl R., Niederreiter H.: Introduction to Finite Fields and Their Applications. Cambridge University Press, revised edition (1994).","DOI":"10.1017\/CBO9781139172769"},{"key":"673_CR25","volume-title":"The Theory of Error-Correcting Codes","author":"FJ MacWilliams","year":"1978","unstructured":"MacWilliams F.J., Sloane N.J.A.: The Theory of Error-Correcting Codes, 2nd edn. North-holland Publishing Company, Amsterdam (1978).","edition":"2"},{"key":"673_CR26","unstructured":"Matsui M.: Linear cryptoanalysis method for DES cipher. In: Helleseth T. (ed.) EUROCRYPT. Lecture Notes in Computer Science, vol. 765, pp. 386\u2013397. Springer, New York (1993)."},{"key":"673_CR27","first-page":"1","volume-title":"Advances in Cryptology \u2014 CRYPTO \u201994","author":"Mitsuru Matsui","year":"1994","unstructured":"Matsui M.: The first experimental cryptanalysis of the Data Encryption Standard. In: Desmedt Y. (ed.) CRYPTO. Lecture Notes in Computer Science, vol. 839, pp. 1\u201311. Springer, New York (1994)."},{"issue":"1","key":"673_CR28","doi-asserted-by":"crossref","first-page":"329","DOI":"10.46586\/tosc.v2017.i1.329-357","volume":"2017","author":"S Mella","year":"2017","unstructured":"Mella S., Daemen J., Van Assche G.: New techniques for trail bounds and application to differential trails in keccak. IACR Trans. Symmetric Cryptol. 2017(1), 329\u2013357 (2017).","journal-title":"IACR Trans. Symmetric Cryptol."},{"key":"673_CR29","unstructured":"Morrison K.E.: Random maps and permutations. Technical report, California Polytechnic State University, San Luis Obispo (1998)."},{"issue":"7","key":"673_CR30","doi-asserted-by":"publisher","first-page":"2581","DOI":"10.1109\/TIT.2007.899508","volume":"53","author":"GJ Ness","year":"2007","unstructured":"Ness G.J., Helleseth T.: A new family of ternary almost perfect nonlinear mappings. IEEE Trans. Inf. Theory 53(7), 2581\u20132586 (2007).","journal-title":"IEEE Trans. Inf. Theory"},{"key":"673_CR31","unstructured":"Rijmen V.: Cryptanalysis and design of iterated block ciphers. PhD thesis, Katholieke Universiteit Leuven, Leuven, Belgium (1997)."},{"key":"673_CR32","doi-asserted-by":"publisher","first-page":"342","DOI":"10.1007\/978-3-642-23951-9_23","volume-title":"Cryptographic Hardware and Embedded Systems \u2013 CHES 2011","author":"Kyoji Shibutani","year":"2011","unstructured":"Shibutani K., Isobe T., Hiwatari H., Mitsuda A., Akishita T., Shirai T.: Piccolo: an ultra-lightweight blockcipher. In: Preneel B., Takagi T. (eds.) CHES. Lecture Notes in Computer Science, vol. 6917, pp. 342\u2013357. Springer, New York (2011)."},{"key":"673_CR33","doi-asserted-by":"publisher","first-page":"181","DOI":"10.1007\/978-3-540-74619-5_12","volume-title":"Fast Software Encryption","author":"Taizo Shirai","year":"2007","unstructured":"Shirai T., Shibutani K., Akishita T., Moriai S., Iwata T.: The 128-bit blockcipher CLEFIA (extended abstract). In: Biryukov A. (ed.) FSE. Lecture Notes in Computer Science, vol. 4593, pp. 181\u2013195. Springer, New York (2007)."},{"issue":"1","key":"673_CR34","doi-asserted-by":"crossref","first-page":"126","DOI":"10.46586\/tosc.v2018.i1.126-159","volume":"2018","author":"K Stoffelen","year":"2018","unstructured":"Stoffelen K., Daemen J.: Column parity mixers. IACR Trans. Symmetric Cryptol. 2018(1), 126\u2013159 (2018).","journal-title":"IACR Trans. Symmetric Cryptol."},{"key":"673_CR35","unstructured":"Todo Y., Leander G., Sasaki Y.: Nonlinear invariant attack\u2014practical attack on full scream, iscream, and midori64. In: Cheon J.H., Takagi T. (eds.) Advances in Cryptology\u2014ASIACRYPT 2016\u201422nd International Conference on the Theory and Application of Cryptology and Information Security, Hanoi, Vietnam, December 4\u20138, 2016, Proceedings, Part II. Lecture Notes in Computer Science, vol. 10032, pp. 3\u201333 (2016)."},{"key":"673_CR36","unstructured":"Wei Y., Ye T., Wu W., Pasalic E.: Generalized nonlinear invariant attack and a new design criterion for round constants. IACR Transactions on Symmetric Cryptology, 2018(4), to appear (2019)."},{"issue":"11","key":"673_CR37","doi-asserted-by":"publisher","first-page":"2513","DOI":"10.1007\/s10623-017-0454-1","volume":"86","author":"Z Zhou","year":"2018","unstructured":"Zhou Z.: Three-weight ternary linear codes from a family of cyclic difference sets. Des. Codes Cryptogr. 86(11), 2513\u20132523 (2018).","journal-title":"Des. Codes Cryptogr."}],"container-title":["Designs, Codes and Cryptography"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s10623-019-00673-2.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/article\/10.1007\/s10623-019-00673-2\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s10623-019-00673-2.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,1,17]],"date-time":"2021-01-17T13:38:40Z","timestamp":1610890720000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/s10623-019-00673-2"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019,8,27]]},"references-count":37,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2020,1]]}},"alternative-id":["673"],"URL":"https:\/\/doi.org\/10.1007\/s10623-019-00673-2","relation":{},"ISSN":["0925-1022","1573-7586"],"issn-type":[{"value":"0925-1022","type":"print"},{"value":"1573-7586","type":"electronic"}],"subject":[],"published":{"date-parts":[[2019,8,27]]},"assertion":[{"value":"3 April 2019","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"12 August 2019","order":2,"name":"revised","label":"Revised","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"12 August 2019","order":3,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"27 August 2019","order":4,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}}]}}