{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,2]],"date-time":"2026-07-02T23:43:18Z","timestamp":1783035798145,"version":"3.54.6"},"reference-count":20,"publisher":"Springer Science and Business Media LLC","issue":"6","license":[{"start":{"date-parts":[[2025,2,8]],"date-time":"2025-02-08T00:00:00Z","timestamp":1738972800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2025,2,8]],"date-time":"2025-02-08T00:00:00Z","timestamp":1738972800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"funder":[{"name":"ANR","award":["ANR-22-CE39-0015"],"award-info":[{"award-number":["ANR-22-CE39-0015"]}]},{"name":"ANR","award":["ANR-22-CE39-0015"],"award-info":[{"award-number":["ANR-22-CE39-0015"]}]},{"name":"ANR","award":["ANR-22-CE39-0015"],"award-info":[{"award-number":["ANR-22-CE39-0015"]}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Des. Codes Cryptogr."],"published-print":{"date-parts":[[2025,6]]},"DOI":"10.1007\/s10623-025-01572-5","type":"journal-article","created":{"date-parts":[[2025,2,8]],"date-time":"2025-02-08T14:10:17Z","timestamp":1739023817000},"page":"2055-2072","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":5,"title":["New models for the cryptanalysis of ASCON"],"prefix":"10.1007","volume":"93","author":[{"given":"Mathieu","family":"Degr\u00e9","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Patrick","family":"Derbez","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Lucie","family":"Lahaye","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Andr\u00e9","family":"Schrottenloher","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2025,2,8]]},"reference":[{"key":"1572_CR1","doi-asserted-by":"publisher","unstructured":"Aoki K., Sasaki Y.: Preimage attacks on one-block MD4, 63-step MD5 and more. In: Selected Areas in Cryptography. LNCS, vol. 5381, pp. 103\u2013119. Springer (2008). https:\/\/doi.org\/10.1007\/978-3-642-04159-4_7.","DOI":"10.1007\/978-3-642-04159-4_7"},{"key":"1572_CR2","unstructured":"Bertoni G., Daemen J., Peeters M., Assche G.V.: Cryptographic Sponge Functions (2011). https:\/\/keccak.team\/files\/CSF-0.1.pdf."},{"key":"1572_CR3","doi-asserted-by":"crossref","unstructured":"Bertoni G., Daemen J., Peeters M., Assche G.V.: Duplexing the sponge: single-pass authenticated encryption and other applications. In: Selected Areas in Cryptography. Lecture Notes in Computer Science, vol. 7118, pp. 320\u2013337. Springer (2011).","DOI":"10.1007\/978-3-642-28496-0_19"},{"issue":"2","key":"1572_CR4","doi-asserted-by":"publisher","first-page":"289","DOI":"10.46586\/TOSC.V2022.I2.289-321","volume":"2022","author":"P Derbez","year":"2022","unstructured":"Derbez P., Lambin B.: Fast MILP models for division property. IACR Trans. Symmetric Cryptol. 2022(2), 289\u2013321 (2022). https:\/\/doi.org\/10.46586\/TOSC.V2022.I2.289-321.","journal-title":"IACR Trans. Symmetric Cryptol."},{"issue":"6","key":"1572_CR5","doi-asserted-by":"publisher","first-page":"74","DOI":"10.1109\/C-M.1977.217750","volume":"10","author":"W Diffie","year":"1977","unstructured":"Diffie W., Hellman M.E.: Special feature exhaustive cryptanalysis of the NBS data encryption standard. Computer 10(6), 74\u201384 (1977). https:\/\/doi.org\/10.1109\/C-M.1977.217750.","journal-title":"Computer"},{"issue":"3","key":"1572_CR6","doi-asserted-by":"publisher","first-page":"33","DOI":"10.1007\/s00145-021-09398-9","volume":"34","author":"C Dobraunig","year":"2021","unstructured":"Dobraunig C., Eichlseder M., Mendel F., Schl\u00e4ffer M.: ASCON v1.2: lightweight authenticated encryption and hashing. J. Cryptol. 34(3), 33 (2021). https:\/\/doi.org\/10.1007\/s00145-021-09398-9.","journal-title":"J. Cryptol."},{"key":"1572_CR7","doi-asserted-by":"publisher","unstructured":"Dobraunig C., Eichlseder M., Mendel F., Schl\u00e4ffer M.: Cryptanalysis of ASCON. In: Nyberg K. (ed.) Topics in Cryptology\u2014CT-RSA 2015, The Cryptographer\u2019s Track at the RSA Conference 2015, San Francisco, CA, USA, 20\u201324 April 2015. Proceedings. Lecture Notes in Computer Science, vol. 9048, pp. 371\u2013387. Springer (2015). https:\/\/doi.org\/10.1007\/978-3-319-16715-2_20.","DOI":"10.1007\/978-3-319-16715-2_20"},{"key":"1572_CR8","unstructured":"Eichlseder M.: TikZ libraries for Crypto (N.D.). https:\/\/extgit.iaik.tugraz.at\/meichlseder\/tikz."},{"issue":"1","key":"1572_CR9","doi-asserted-by":"publisher","first-page":"64","DOI":"10.46586\/TOSC.V2022.I1.64-87","volume":"2022","author":"J Erlacher","year":"2022","unstructured":"Erlacher J., Mendel F., Eichlseder M.: Bounds for the security of ASCON against differential and linear cryptanalysis. IACR Trans. Symmetric Cryptol. 2022(1), 64\u201387 (2022). https:\/\/doi.org\/10.46586\/TOSC.V2022.I1.64-87.","journal-title":"IACR Trans. Symmetric Cryptol."},{"issue":"1","key":"1572_CR10","doi-asserted-by":"publisher","first-page":"64","DOI":"10.46586\/TOSC.V2022.I1.64-87","volume":"2022","author":"J Erlacher","year":"2022","unstructured":"Erlacher J., Mendel F., Eichlseder M.: Bounds for the security of ASCON against differential and linear cryptanalysis. IACR Trans. Symmetric Cryptol. 2022(1), 64\u201387 (2022). https:\/\/doi.org\/10.46586\/TOSC.V2022.I1.64-87.","journal-title":"IACR Trans. Symmetric Cryptol."},{"issue":"3","key":"1572_CR11","doi-asserted-by":"publisher","first-page":"102","DOI":"10.46586\/TOSC.V2021.I3.102-136","volume":"2021","author":"D G\u00e9rault","year":"2021","unstructured":"G\u00e9rault D., Peyrin T., Tan Q.Q.: Exploring differential-based distinguishers and forgeries for ASCON. IACR Trans. Symmetric Cryptol. 2021(3), 102\u2013136 (2021). https:\/\/doi.org\/10.46586\/TOSC.V2021.I3.102-136.","journal-title":"IACR Trans. Symmetric Cryptol."},{"key":"1572_CR12","doi-asserted-by":"publisher","unstructured":"Guo J., Ling S., Rechberger C., Wang H.: Advanced meet-in-the-middle preimage attacks: first results on full tiger, and improved results on MD4 and SHA-2. In: ASIACRYPT. LNCS, 2010, vol. 6477, pp. 56\u201375. Springer (2010).https:\/\/doi.org\/10.1007\/978-3-642-17373-8_4.","DOI":"10.1007\/978-3-642-17373-8_4"},{"issue":"4","key":"1572_CR13","doi-asserted-by":"publisher","first-page":"145","DOI":"10.46586\/TOSC.V2022.I4.145-178","volume":"2022","author":"SE Hirch","year":"2022","unstructured":"Hirch S.E., Mella S., Mehrdad A., Daemen J.: Improved differential and linear trail bounds for ASCON. IACR Trans. Symmetric Cryptol. 2022(4), 145\u2013178 (2022). https:\/\/doi.org\/10.46586\/TOSC.V2022.I4.145-178.","journal-title":"IACR Trans. Symmetric Cryptol."},{"key":"1572_CR14","doi-asserted-by":"publisher","unstructured":"Ignatiev A., Morgado A., Marques-Silva J.: PySAT: a Python toolkit for prototyping with SAT oracles. In: SAT, 2018, pp. 428\u2013437 (2018).https:\/\/doi.org\/10.1007\/978-3-319-94144-8_26.","DOI":"10.1007\/978-3-319-94144-8_26"},{"issue":"3","key":"1572_CR15","doi-asserted-by":"publisher","first-page":"74","DOI":"10.46586\/tosc.v2023.i3.74-100","volume":"2023","author":"H Li","year":"2023","unstructured":"Li H., He L., Chen S., Guo J., Qiu W.: Automatic preimage attack framework on ASCON using a linearize-and-guess approach. IACR Trans. Symmetric Cryptol. 2023(3), 74\u2013100 (2023). https:\/\/doi.org\/10.46586\/tosc.v2023.i3.74-100.","journal-title":"IACR Trans. Symmetric Cryptol."},{"issue":"3","key":"1572_CR16","doi-asserted-by":"publisher","first-page":"303","DOI":"10.46586\/TOSC.V2022.I3.303-340","volume":"2022","author":"RH Makarim","year":"2022","unstructured":"Makarim R.H., Rohit R.: Towards tight differential bounds of ASCON: a hybrid usage of SMT and MILP. IACR Trans. Symmetric Cryptol. 2022(3), 303\u2013340 (2022). https:\/\/doi.org\/10.46586\/TOSC.V2022.I3.303-340.","journal-title":"IACR Trans. Symmetric Cryptol."},{"key":"1572_CR17","doi-asserted-by":"crossref","unstructured":"Qin L., Zhao B., Hua J., Dong X., Wang X.: Weak-diffusion structure: meet-in-the-middle attacks on sponge-based hashing revisited. IACR Cryptol. ePrint Archive 518 (2023).","DOI":"10.1007\/978-3-031-30634-1_6"},{"key":"1572_CR18","doi-asserted-by":"publisher","unstructured":"Qin L., Hua J., Dong X., Yan H., Wang X.: Meet-in-the-middle preimage attacks on sponge-based hashing. In: EUROCRYPT (4). Lecture Notes in Computer Science, vol. 14007, pp. 158\u2013188. Springer (2023). https:\/\/doi.org\/10.1007\/978-3-031-30634-1_6.","DOI":"10.1007\/978-3-031-30634-1_6"},{"issue":"1","key":"1572_CR19","doi-asserted-by":"publisher","first-page":"269","DOI":"10.46586\/tosc.v2021.i1.269-315","volume":"2021","author":"L Sun","year":"2021","unstructured":"Sun L., Wang W., Wang M.: Accelerating the search of differential and linear characteristics with the SAT method. IACR Trans. Symmetric Cryptol. 2021(1), 269\u2013315 (2021). https:\/\/doi.org\/10.46586\/tosc.v2021.i1.269-315.","journal-title":"IACR Trans. Symmetric Cryptol."},{"key":"1572_CR20","doi-asserted-by":"publisher","DOI":"10.6028\/NIST.IR.8454","volume-title":"Status Report on the Final Round of the NIST Lightweight Cryptography Standardization Process","author":"MS Turan","year":"2023","unstructured":"Turan M.S., McKay K., Chang D., Kang J., Waller N., Kelsey J.M., Bassham L.E., Hong D.: Status Report on the Final Round of the NIST Lightweight Cryptography Standardization Process. NIST, Gaithersburg (2023)."}],"container-title":["Designs, Codes and Cryptography"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10623-025-01572-5.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s10623-025-01572-5\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10623-025-01572-5.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T19:54:43Z","timestamp":1750276483000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s10623-025-01572-5"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,2,8]]},"references-count":20,"journal-issue":{"issue":"6","published-print":{"date-parts":[[2025,6]]}},"alternative-id":["1572"],"URL":"https:\/\/doi.org\/10.1007\/s10623-025-01572-5","relation":{},"ISSN":["0925-1022","1573-7586"],"issn-type":[{"value":"0925-1022","type":"print"},{"value":"1573-7586","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,2,8]]},"assertion":[{"value":"8 October 2024","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"14 January 2025","order":2,"name":"revised","label":"Revised","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"15 January 2025","order":3,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"8 February 2025","order":4,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The authors have no competing interests to declare that are relevant to the content of this article.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflict of interest"}}]}}