{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,19]],"date-time":"2026-02-19T08:12:20Z","timestamp":1771488740437,"version":"3.50.1"},"reference-count":39,"publisher":"Springer Science and Business Media LLC","issue":"11","license":[{"start":{"date-parts":[[2020,7,24]],"date-time":"2020-07-24T00:00:00Z","timestamp":1595548800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2020,7,24]],"date-time":"2020-07-24T00:00:00Z","timestamp":1595548800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61902414"],"award-info":[{"award-number":["61902414"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61672530"],"award-info":[{"award-number":["61672530"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61772545"],"award-info":[{"award-number":["61772545"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100004497","name":"Onderzoeksraad, KU Leuven","doi-asserted-by":"publisher","award":["C16\/15\/058 and OT\/13\/071"],"award-info":[{"award-number":["C16\/15\/058 and OT\/13\/071"]}],"id":[{"id":"10.13039\/501100004497","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61672330"],"award-info":[{"award-number":["61672330"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Des. Codes Cryptogr."],"published-print":{"date-parts":[[2020,11]]},"DOI":"10.1007\/s10623-020-00782-3","type":"journal-article","created":{"date-parts":[[2020,7,24]],"date-time":"2020-07-24T17:03:03Z","timestamp":1595610183000},"page":"2289-2311","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":5,"title":["The phantom of differential characteristics"],"prefix":"10.1007","volume":"88","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-6487-9785","authenticated-orcid":false,"given":"Yunwen","family":"Liu","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Wenying","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Bing","family":"Sun","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Vincent","family":"Rijmen","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Guoqiang","family":"Liu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Chao","family":"Li","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Shaojing","family":"Fu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Meichun","family":"Cao","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2020,7,24]]},"reference":[{"key":"782_CR1","doi-asserted-by":"crossref","unstructured":"Banik S., Bogdanov A., Isobe T., Shibutani K., Hiwatari H., Akishita T., Regazzoni F.: Midori: a block cipher for low energy. In: Advances in Cryptology\u2014ASIACRYPT 2015, pp. 411\u2013436. Springer (2015).","DOI":"10.1007\/978-3-662-48800-3_17"},{"key":"782_CR2","doi-asserted-by":"crossref","unstructured":"Biham E., Shamir A.: Differential cryptanalysis of DES-like cryptosystems. In: Advances in Cryptology\u2014CRYPTO \u201990, 10th Annual International Cryptology Conference, Santa Barbara, California, USA, 11\u201315 August 1990. Proceedings, pp. 2\u201321 (1990).","DOI":"10.1007\/3-540-38424-3_1"},{"key":"782_CR3","doi-asserted-by":"crossref","unstructured":"Biham E., Shamir A.: Differential cryptanalysis of Snefru, Khafre, REDOC-II, LOKI and Lucifer. In: Advances in Cryptology\u2014CRYPTO \u201991, 11th Annual International Cryptology Conference, Santa Barbara, California, USA, 11\u201315 August 1991. Proceedings, pp. 156\u2013171 (1991).","DOI":"10.1007\/3-540-46766-1_11"},{"key":"782_CR4","doi-asserted-by":"crossref","unstructured":"Biham E., Biryukov A., Shamir A.: Cryptanalysis of Skipjack reduced to 31 rounds using impossible differentials. In: Advances in Cryptology\u2014EUROCRYPT \u201999, International Conference on the Theory and Application of Cryptographic Techniques, Prague, Czech Republic, 2\u20136 May 1999. Proceeding, pp. 12\u201323 (1999).","DOI":"10.1007\/3-540-48910-X_2"},{"key":"782_CR5","doi-asserted-by":"crossref","unstructured":"Biham E., Dunkelman O., Keller N.: New results on boomerang and rectangle attacks. In: Fast Software Encryption, 9th International Workshop, FSE 2002, Leuven, Belgium, 4\u20136 February 2002. Revised Papers, pp. 1\u201316 (2002).","DOI":"10.1007\/3-540-45661-9_1"},{"key":"782_CR6","doi-asserted-by":"crossref","unstructured":"Biryukov A., Khovratovich D.: Related-key cryptanalysis of the full AES-192 and AES-256. In: Advances in Cryptology\u2014ASIACRYPT 2009, 15th International Conference on the Theory and Application of Cryptology and Information Security, Tokyo, Japan, 6\u201310 December 2009. Proceedings, pp. 1\u201318 (2009).","DOI":"10.1007\/978-3-642-10366-7_1"},{"key":"782_CR7","doi-asserted-by":"crossref","unstructured":"Blondeau C., G\u00e9rard B.: Multiple differential cryptanalysis: theory and practice. In: Fast Software Encryption\u201418th International Workshop, FSE 2011, Lyngby, Denmark, 13\u201316 February 2011. Revised Selected Papers, pp. 35\u201354 (2011).","DOI":"10.1007\/978-3-642-21702-9_3"},{"key":"782_CR8","doi-asserted-by":"crossref","unstructured":"Borghoff J., Canteaut A., G\u00fcneysu T., Kavun E.B., Knezevic M., Knudsen L.R., Leander G., Nikov V., Paar C., Rechberger C., Rombouts P., Thomsen S.S., Yal\u00e7in T.: PRINCE\u2014a low-latency block cipher for pervasive computing applications\u2014extended abstract. In: Advances in Cryptology\u2014ASIACRYPT 2012\u201418th International Conference on the Theory and Application of Cryptology and Information Security, Beijing, China, 2\u20136 December 2012. Proceedings, pp. 208\u2013225 (2012).","DOI":"10.1007\/978-3-642-34961-4_14"},{"key":"782_CR9","doi-asserted-by":"crossref","unstructured":"Canteaut A., Fuhr T., Gilbert H., Naya-Plasencia M., Reinhard J.: Multiple differential cryptanalysis of round-reduced PRINCE. In: Fast Software Encryption\u201421st International Workshop, FSE 2014, London, UK, 3\u20135 March 2014. Revised Selected Papers, pp. 591\u2013610 (2014).","DOI":"10.1007\/978-3-662-46706-0_30"},{"issue":"2","key":"782_CR10","doi-asserted-by":"crossref","first-page":"203","DOI":"10.46586\/tosc.v2017.i2.203-227","volume":"2017","author":"A Canteaut","year":"2017","unstructured":"Canteaut A., Lambooij E., Neves S., Rasoolzadeh S., Sasaki Y., Stevens M.: Refined probability of differential characteristics including dependency between multiple rounds. IACR Trans. Symmetric Cryptol. 2017(2), 203\u2013227 (2017).","journal-title":"IACR Trans. Symmetric Cryptol."},{"key":"782_CR11","doi-asserted-by":"crossref","unstructured":"Daemen J., Rijmen V.: AES and the wide trail design strategy. In: EUROCRYPT 2002, pp. 108\u2013109 (2002).","DOI":"10.1007\/3-540-46035-7_7"},{"key":"782_CR12","series-title":"Information Security and Cryptography","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-04722-4","volume-title":"The Design of Rijndael: AES-The Advanced Encryption Standard","author":"J Daemen","year":"2002","unstructured":"Daemen J., Rijmen V.: The Design of Rijndael: AES-The Advanced Encryption Standard. Information Security and CryptographySpringer, Berlin (2002)."},{"issue":"1","key":"782_CR13","doi-asserted-by":"publisher","first-page":"11","DOI":"10.1049\/iet-ifs:20060099","volume":"1","author":"J Daemen","year":"2007","unstructured":"Daemen J., Rijmen V.: Plateau characteristics. IET Inf. Secur. 1(1), 11\u201317 (2007).","journal-title":"IET Inf. Secur."},{"key":"782_CR14","doi-asserted-by":"crossref","unstructured":"Derbez P., Fouque P., Jean J.: Improved key recovery attacks on reduced-round AES in the single-key setting. In: Advances in Cryptology\u2014EUROCRYPT 2013, 32nd Annual International Conference on the Theory and Applications of Cryptographic Techniques, Athens, Greece, 26\u201330 May 2013. Proceedings, pp. 371\u2013387 (2013).","DOI":"10.1007\/978-3-642-38348-9_23"},{"key":"782_CR15","unstructured":"Gauravaram P., Knudsen L.R., Matusiewicz K., Mendel F., Rechberger C., Schl\u00e4ffer M., Thomsen S.S.: Gr\u00f8stl-a SHA-3 candidate. In: Dagstuhl Seminar Proceedings. Schloss Dagstuhl-Leibniz-Zentrum f\u00fcr Informatik (2009)."},{"key":"782_CR16","doi-asserted-by":"crossref","unstructured":"Hall C., Kelsey J., Rijmen V., Schneier B., Wagner D.: Cryptanalysis of SPEED. In: Selected Areas in Cryptography \u201998, SAC\u201998, Kingston, Ontario, Canada, 17\u201318 August 1998. Proceedings, pp. 319\u2013338 (1998).","DOI":"10.1007\/3-540-48892-8_25"},{"key":"782_CR17","doi-asserted-by":"crossref","unstructured":"Karpman P., Peyrin T., Stevens M.: Practical free-start collision attacks on 76-step SHA-1. In: Advances in Cryptology\u2014CRYPTO 2015\u201435th Annual Cryptology Conference, Santa Barbara, CA, USA, 16\u201320 August 2015. Proceedings, Part I, pp. 623\u2013642 (2015).","DOI":"10.1007\/978-3-662-47989-6_30"},{"key":"782_CR18","doi-asserted-by":"crossref","unstructured":"Khovratovich D., Nikolic I., Pieprzyk J., Sokolowski P., Steinfeld R.: Rotational cryptanalysis of ARX revisited. In: Fast Software Encryption\u201422nd International Workshop, FSE 2015, Istanbul, Turkey, 8\u201311 March 2015. Revised Selected Papers, pp. 519\u2013536 (2015).","DOI":"10.1007\/978-3-662-48116-5_25"},{"key":"782_CR19","unstructured":"Knudsen L.R.: Iterative characteristics of DES and s$${^2}$$-DES. In: Advances in Cryptology\u2014CRYPTO \u201992, 12th Annual International Cryptology Conference, Santa Barbara, California, USA, 16\u201320 August 1992. Proceedings, pp. 497\u2013511 (1992)."},{"key":"782_CR20","doi-asserted-by":"crossref","unstructured":"Knudsen L.R.: Truncated and higher order differentials. In: Fast Software Encryption: Second International Workshop, Leuven, Belgium, 14\u201316 December 1994. Proceedings, pp. 196\u2013211 (1994).","DOI":"10.1007\/3-540-60590-8_16"},{"key":"782_CR21","doi-asserted-by":"crossref","unstructured":"K\u00f6lbl S., Leander G., Tiessen T.: Observations on the SIMON block cipher family. In: Advances in Cryptology\u2014CRYPTO 2015\u201435th Annual Cryptology Conference, Santa Barbara, CA, USA, 16\u201320 August 2015. Proceedings, Part I, pp. 161\u2013185. Springer (2015).","DOI":"10.1007\/978-3-662-47989-6_8"},{"key":"782_CR22","doi-asserted-by":"publisher","first-page":"227","DOI":"10.1007\/978-1-4615-2694-0_23","volume":"276","author":"X Lai","year":"1994","unstructured":"Lai X.: Higher order derivatives and differential cryptanalysis. Commun. Cryptogr. 276, 227\u2013233 (1994).","journal-title":"Commun. Cryptogr."},{"key":"782_CR23","doi-asserted-by":"crossref","unstructured":"Lai X., Massey J.L., Murphy S.: Markov ciphers and differential cryptanalysis. In: Advances in Cryptology\u2014EUROCRYPT \u201991, Workshop on the Theory and Application of Cryptographic Techniques, Brighton, UK, 8\u201311 April 1991, Proceedings, pp. 17\u201338 (1991).","DOI":"10.1007\/3-540-46416-6_2"},{"key":"782_CR24","doi-asserted-by":"crossref","unstructured":"Lallemand V., Naya-Plasencia M.: Cryptanalysis of KLEIN. In: Fast Software Encryption\u201421st International Workshop, FSE 2014, London, UK, 3\u20135 March 2014. Revised Selected Papers, pp. 451\u2013470 (2014).","DOI":"10.1007\/978-3-662-46706-0_23"},{"key":"782_CR25","doi-asserted-by":"crossref","unstructured":"Leander G., Abdelraheem M., AlKhzaimi H., Zenner E.: A cryptanalysis of PRINTcipher: the invariant subspace attack. In: Advances in Cryptology\u2014CRYPTO 2011\u201431st Annual Cryptology Conference, Santa Barbara, CA, USA, 14\u201318 August 2011. Proceedings, pp. 206\u2013221. Springer (2011).","DOI":"10.1007\/978-3-642-22792-9_12"},{"key":"782_CR26","doi-asserted-by":"crossref","unstructured":"Leurent G.: Analysis of differential attacks in ARX constructions. In: Advances in Cryptology\u2014ASIACRYPT 2012\u201418th International Conference on the Theory and Application of Cryptology and Information Security, Beijing, China, 2\u20136 December 2012. Proceedings, pp. 226\u2013243 (2012).","DOI":"10.1007\/978-3-642-34961-4_15"},{"key":"782_CR27","doi-asserted-by":"crossref","unstructured":"Mendel F., Rechberger C., Schl\u00e4ffer M., Thomsen S.S.: The rebound attack: cryptanalysis of reduced whirlpool and Gr\u00f8stl. In: Fast Software Encryption, 16th International Workshop, FSE 2009, Leuven, Belgium, 22\u201325 February 2009. Revised Selected Papers, pp. 260\u2013276 (2009).","DOI":"10.1007\/978-3-642-03317-9_16"},{"key":"782_CR28","unstructured":"National Bureau of Standards: Data Encryption Standard. US Department of Commerce, FIPS Publication 46 (1977)."},{"key":"782_CR29","doi-asserted-by":"crossref","unstructured":"Stevens M., Bursztein E., Karpman P., Albertini A., Markov Y.: The first collision for full SHA-1. In: Advances in Cryptology\u2014CRYPTO 2017\u201437th Annual International Cryptology Conference, Santa Barbara, CA, USA, 20\u201324 August 2017. Proceedings, Part I, pp. 570\u2013596 (2017).","DOI":"10.1007\/978-3-319-63688-7_19"},{"key":"782_CR30","doi-asserted-by":"crossref","unstructured":"Sun B., Liu Z., Rijmen V., Li R., Cheng L., Wang Q., AlKhzaimi H., Li C.: Links among impossible differential, integral and zero correlation linear cryptanalysis. In: Advances in Cryptology\u2014CRYPTO 2015\u201435th Annual Cryptology Conference, Santa Barbara, CA, USA, 16\u201320 August 2015. Proceedings, Part I, pp. 95\u2013115 (2015).","DOI":"10.1007\/978-3-662-47989-6_5"},{"key":"782_CR31","doi-asserted-by":"crossref","unstructured":"Sun B., Liu M., Guo J., Rijmen V., Li R.: Provable security evaluation of structures against impossible differential and zero correlation linear cryptanalysis. In: Advances in Cryptology\u2014EUROCRYPT 2016\u201435th Annual International Conference on the Theory and Applications of Cryptographic Techniques, Vienna, Austria, 8\u201312 May 2016. Proceedings, Part I, pp. 196\u2013213 (2016).","DOI":"10.1007\/978-3-662-49890-3_8"},{"issue":"1","key":"782_CR32","doi-asserted-by":"crossref","first-page":"281","DOI":"10.46586\/tosc.v2017.i1.281-306","volume":"2017","author":"S Sun","year":"2017","unstructured":"Sun S., Gerault D., Lafourcade P., Yang Q., Todo Y., Qiao K., Hu L.: Analysis of AES, skinny, and others with constraint programming. IACR Trans. Symmetric Cryptol. 2017(1), 281\u2013306 (2017).","journal-title":"IACR Trans. Symmetric Cryptol."},{"issue":"3","key":"782_CR33","doi-asserted-by":"crossref","first-page":"93","DOI":"10.46586\/tosc.v2018.i3.93-123","volume":"2018","author":"L Sun","year":"2018","unstructured":"Sun L., Wang W., Wang M.: More accurate differential properties of LED64 and Midori64. IACR Trans. Symmetric Cryptol. 2018(3), 93\u2013123 (2018).","journal-title":"IACR Trans. Symmetric Cryptol."},{"key":"782_CR34","doi-asserted-by":"crossref","unstructured":"Tolba M., Abdelkhalek A., Youssef A.M.: Truncated and multiple differential cryptanalysis of reduced round Midori128. In: Information Security\u201419th International Conference, ISC 2016, Honolulu, HI, USA, 3\u20136 September 2016. Proceedings, pp. 3\u201317 (2016).","DOI":"10.1007\/978-3-319-45871-7_1"},{"key":"782_CR35","doi-asserted-by":"crossref","unstructured":"Wagner D.: The boomerang attack. In: Fast Software Encryption, 6th International Workshop, FSE \u201999, Rome, Italy, 24\u201326 March 1999. Proceedings, pp. 156\u2013170 (1999).","DOI":"10.1007\/3-540-48519-8_12"},{"key":"782_CR36","unstructured":"Wang X., Yu H.: How to break MD5 and other hash functions. In: Advances in Cryptology\u2014EUROCRYPT 2005, 24th Annual International Conference on the Theory and Applications of Cryptographic Techniques, Aarhus, Denmark, 22\u201326 May 2005. Proceedings, pp. 19\u201335 (2005)."},{"key":"782_CR37","doi-asserted-by":"crossref","unstructured":"Wang X., Yin Y.L., Yu H.: Finding collisions in the full SHA-1. In: Advances in Cryptology\u2014CRYPTO 2005: 25th Annual International Cryptology Conference, Santa Barbara, California, USA, 14\u201318 August 2005. Proceedings, pp. 17\u201336 (2005).","DOI":"10.1007\/11535218_2"},{"key":"782_CR38","doi-asserted-by":"crossref","unstructured":"Wang G., Keller N., Dunkelman O.: The delicate issues of addition with respect to XOR differences. In: Selected Areas in Cryptography, 14th International Workshop, SAC 2007, Ottawa, Canada, 16\u201317 August 2007. Revised Selected Papers, pp. 212\u2013231 (2007).","DOI":"10.1007\/978-3-540-77360-3_14"},{"key":"782_CR39","doi-asserted-by":"crossref","unstructured":"Wang M., Sun Y., Tischhauser E., Preneel B.: A model for structure attacks, with applications to PRESENT and Serpent. In: Fast Software Encryption\u201419th International Workshop, FSE 2012, Washington, DC, USA, 19\u201321 March 2012. Revised Selected Papers, pp. 49\u201368 (2012).","DOI":"10.1007\/978-3-642-34047-5_4"}],"container-title":["Designs, Codes and Cryptography"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10623-020-00782-3.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s10623-020-00782-3\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10623-020-00782-3.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,7,24]],"date-time":"2021-07-24T00:06:57Z","timestamp":1627085217000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s10623-020-00782-3"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,7,24]]},"references-count":39,"journal-issue":{"issue":"11","published-print":{"date-parts":[[2020,11]]}},"alternative-id":["782"],"URL":"https:\/\/doi.org\/10.1007\/s10623-020-00782-3","relation":{},"ISSN":["0925-1022","1573-7586"],"issn-type":[{"value":"0925-1022","type":"print"},{"value":"1573-7586","type":"electronic"}],"subject":[],"published":{"date-parts":[[2020,7,24]]},"assertion":[{"value":"30 November 2019","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"2 June 2020","order":2,"name":"revised","label":"Revised","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"20 June 2020","order":3,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"24 July 2020","order":4,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}}]}}