{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,27]],"date-time":"2026-07-27T09:02:03Z","timestamp":1785142923540,"version":"3.55.0"},"reference-count":50,"publisher":"Springer Science and Business Media LLC","issue":"7","license":[{"start":{"date-parts":[[2026,7,2]],"date-time":"2026-07-02T00:00:00Z","timestamp":1782950400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2026,7,2]],"date-time":"2026-07-02T00:00:00Z","timestamp":1782950400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"funder":[{"name":"Heilongjiang Graduate Excellence Funding Program","award":["LJYXL2024-025"],"award-info":[{"award-number":["LJYXL2024-025"]}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62271234"],"award-info":[{"award-number":["62271234"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Open Foundation of State Key Laboratory of Networking and Switching Technology","award":["SKLNST-2024-1-04"],"award-info":[{"award-number":["SKLNST-2024-1-04"]}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Quantum Inf Process"],"DOI":"10.1007\/s11128-026-05257-3","type":"journal-article","created":{"date-parts":[[2026,7,2]],"date-time":"2026-07-02T04:24:36Z","timestamp":1782966276000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Resource-efficient Grover-meets-BV Q1 attacks on permutation-based pseudorandom functions"],"prefix":"10.1007","volume":"25","author":[{"given":"Jia-Wen","family":"Zhou","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Bao-Min","family":"Zhou","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Long","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ke-Jia","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2026,7,2]]},"reference":[{"key":"5257_CR1","doi-asserted-by":"crossref","unstructured":"Diffie, W., Hellman, M.E.: New directions in cryptography. In: Democratizing Cryptography: The Work of Whitfield Diffie and Martin Hellman, pp. 365\u2013390 (2022)","DOI":"10.1145\/3549993.3550007"},{"key":"5257_CR2","doi-asserted-by":"publisher","DOI":"10.1201\/9781420010756","volume-title":"Introduction to Modern Cryptography: Principles and Protocols","author":"J Katz","year":"2007","unstructured":"Katz, J., Lindell, Y.: Introduction to Modern Cryptography: Principles and Protocols. Chapman and Hall\/CRC, Boca Raton (2007)"},{"issue":"2","key":"5257_CR3","doi-asserted-by":"publisher","first-page":"120","DOI":"10.1145\/359340.359342","volume":"21","author":"RL Rivest","year":"1978","unstructured":"Rivest, R.L., Shamir, A., Adleman, L.: A method for obtaining digital signatures and public-key cryptosystems. Commun. ACM 21(2), 120\u2013126 (1978)","journal-title":"Commun. ACM"},{"issue":"177","key":"5257_CR4","doi-asserted-by":"publisher","first-page":"203","DOI":"10.1090\/S0025-5718-1987-0866109-5","volume":"48","author":"N Koblitz","year":"1987","unstructured":"Koblitz, N.: Elliptic curve cryptosystems. Math. Comput. 48(177), 203\u2013209 (1987)","journal-title":"Math. Comput."},{"key":"5257_CR5","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-04722-4","volume-title":"The Design of Rijndael","author":"J Daemen","year":"2002","unstructured":"Daemen, J.: The Design of Rijndael. Springer-Verlag, New York (2002)"},{"key":"5257_CR6","doi-asserted-by":"crossref","unstructured":"Shor, P.W.: Algorithms for quantum computation: discrete logarithms and factoring. In: Proceedings of the 35th Annual Symposium on Foundations of Computer Science, pp. 124\u2013134 (1994)","DOI":"10.1109\/SFCS.1994.365700"},{"issue":"2","key":"5257_CR7","doi-asserted-by":"publisher","first-page":"303","DOI":"10.1137\/S0036144598347011","volume":"41","author":"PW Shor","year":"1999","unstructured":"Shor, P.W.: Polynomial-time algorithms for prime factorization and discrete logarithms on a quantum computer. SIAM Rev. 41(2), 303\u2013332 (1999)","journal-title":"SIAM Rev."},{"key":"5257_CR8","doi-asserted-by":"crossref","unstructured":"Grover, L.K.: A fast quantum mechanical algorithm for database search. In: Proceedings of the Twenty-eighth Annual ACM Symposium on Theory of Computing, pp. 212\u2013219 (1996)","DOI":"10.1145\/237814.237866"},{"key":"5257_CR9","doi-asserted-by":"crossref","unstructured":"Boneh, D., Zhandry, M.: Secure signatures and chosen ciphertext security in a quantum computing world. In: Annual Cryptology Conference, pp. 361\u2013379 (2013)","DOI":"10.1007\/978-3-642-40084-1_21"},{"key":"5257_CR10","first-page":"1","volume":"1","author":"DJ Bernstein","year":"2009","unstructured":"Bernstein, D.J., et al.: Introduction to post-quantum cryptography. Post-quantum Cryptogr. 1, 1\u201310 (2009)","journal-title":"Post-quantum Cryptogr."},{"key":"5257_CR11","unstructured":"National Institute of Standards and Technology. In: Submission Requirements and Evaluation Criteria for the Post-quantum Cryptography Standardization Process (2016)"},{"key":"5257_CR12","doi-asserted-by":"crossref","unstructured":"Kaplan, M., Leurent, G., Leverrier, A., Naya-Plasencia, M.: Breaking symmetric cryptosystems using quantum period finding. In: Annual International Cryptology Conference, pp. 207\u2013237 (2016)","DOI":"10.1007\/978-3-662-53008-5_8"},{"key":"5257_CR13","unstructured":"Santoli, T., Schaffner, C.: Using Simon\u2019s algorithm to attack symmetric-key cryptographic primitives, (2016). Preprint at arXiv:1603.07856"},{"key":"5257_CR14","doi-asserted-by":"crossref","unstructured":"Boneh, D., Zhandry, M.: Quantum-secure message authentication codes. In: Annual International Conference on the Theory and Applications of Cryptographic Techniques, pp. 592\u2013608 (2013)","DOI":"10.1007\/978-3-642-38348-9_35"},{"issue":"5","key":"5257_CR15","doi-asserted-by":"publisher","first-page":"1474","DOI":"10.1137\/S0097539796298637","volume":"26","author":"DR Simon","year":"1997","unstructured":"Simon, D.R.: On the power of quantum computation. SIAM J. Comput. 26(5), 1474\u20131483 (1997)","journal-title":"SIAM J. Comput."},{"key":"5257_CR16","doi-asserted-by":"crossref","unstructured":"Gagliardoni, T., Hlsing, A., Schaffner, C.: Semantic security and indistinguishability in the quantum world. In: Annual international cryptology conference, pp. 60-89 (2016)","DOI":"10.1007\/978-3-662-53015-3_3"},{"key":"5257_CR17","doi-asserted-by":"crossref","unstructured":"Kuwakado, H., Morii, M.: Quantum distinguisher between the 3-round Feistel cipher and the random permutation. In: 2010 IEEE International Symposium on Information Theory, pp. 2682\u20132685 (2010)","DOI":"10.1109\/ISIT.2010.5513654"},{"key":"5257_CR18","unstructured":"Kuwakado, H., Morii, M.: Security on the quantum-type Even-Mansour cipher. In: 2012 International Symposium on Information Theory and Its Applications, pp. 312\u2013316 (2012)"},{"key":"5257_CR19","doi-asserted-by":"crossref","unstructured":"Bonnetain, X., Hosoyamada, A., Naya-Plasencia, M., Sasaki, Y., Schrottenloher, A.: Quantum attacks without superposition queries: the offline Simon\u2019s algorithm. In: International Conference on the Theory and Application of Cryptology and Information Security, pp. 552\u2013583 (2019)","DOI":"10.1007\/978-3-030-34578-5_20"},{"key":"5257_CR20","doi-asserted-by":"crossref","unstructured":"Hosoyamada, A., Sasaki, Y.: Cryptanalysis against symmetric-key schemes with online classical queries and offline quantum computations. In: Cryptographers\u2019s Track at the RSA Conference, pp. 198\u2013218 (2018)","DOI":"10.1007\/978-3-319-76953-0_11"},{"key":"5257_CR21","doi-asserted-by":"crossref","unstructured":"Leander, G., May, A.: Grover meets Simon-quantumly attacking the FX-construction. In: International Conference on the Theory and Application of Cryptology and Information Security, pp. 161\u2013178 (2017)","DOI":"10.1007\/978-3-319-70697-9_6"},{"key":"5257_CR22","doi-asserted-by":"crossref","unstructured":"Jaeger, J., Song, F., Tessaro, S.: Quantum key-length extension. In: Theory of Cryptography Conference, pp. 209\u2013239 (2021)","DOI":"10.1007\/978-3-030-90459-3_8"},{"key":"5257_CR23","doi-asserted-by":"crossref","unstructured":"Basak, J., Bhaumik, R., Chauhan, A.K., Jejurikar, R., Jha, A., Roy, A., Schrottenloher, A., Talnikar, S.: Post-quantum security of key-alternating Feistel ciphers. Cryptology ePrint Archive (2025)","DOI":"10.1007\/978-981-95-5018-0_15"},{"issue":"5","key":"5257_CR24","first-page":"1139","volume":"11","author":"C Guo","year":"2024","unstructured":"Guo, C., Huang, A., Yu, Y.: FX key length extension constructs quantum Q1 security proofs. J. Cryptol. Res. 11(5), 1139 (2024)","journal-title":"J. Cryptol. Res."},{"key":"5257_CR25","doi-asserted-by":"crossref","unstructured":"Bootsma, S.E., Vries, D., M.: A survey on the quantum security of block cipher-based cryptography. IEEE Access (2024)","DOI":"10.1109\/ACCESS.2024.3520364"},{"key":"5257_CR26","unstructured":"Bai, C., Esmaili, M., Mantri, A.: Quantum security analysis of the key-alternating ciphers (2024). Preprint at arXiv:2412.05026"},{"key":"5257_CR27","doi-asserted-by":"crossref","unstructured":"Hod\u017ei\u0107, Knudsen, L.R.: A quantum distinguisher for 7\/8-round SMS4 block cipher. Quantum Inf. Process. 19(11), 411 (2020)","DOI":"10.1007\/s11128-020-02929-6"},{"key":"5257_CR28","doi-asserted-by":"crossref","unstructured":"Khosravi, A., Eghlidos, T.: On relaxation of Simon\u2019s algorithm. In: 2021 18th International ISC Conference on Information Security and Cryptology (ISCISC), pp. 50\u201356 (2021)","DOI":"10.1109\/ISCISC53448.2021.9720441"},{"issue":"4","key":"5257_CR29","doi-asserted-by":"publisher","first-page":"792","DOI":"10.1145\/6490.6503","volume":"33","author":"O Goldreich","year":"1986","unstructured":"Goldreich, O., Goldwasser, S., Micali, S.: How to construct random functions. J. ACM (JACM) 33(4), 792\u2013807 (1986)","journal-title":"J. ACM (JACM)"},{"key":"5257_CR30","doi-asserted-by":"crossref","unstructured":"Sun, H.-W., Gao, F., Xu, R.-X., Li, D.-D., Li, Z.-Q., Zhang, K.-J.: Quantum key-recovery attacks on permutation-based pseudorandom functions. IEEE Internet Things J. (2025)","DOI":"10.1109\/JIOT.2025.3579024"},{"key":"5257_CR31","doi-asserted-by":"crossref","unstructured":"Dutta, A., Nandi, M., Talnikar, S.: Permutation-based EDM: an inverse free BBB secure PRF. In: IACR Transactions on Symmetric Cryptology, pp. 31\u201370 (2021)","DOI":"10.46586\/tosc.v2021.i2.31-70"},{"issue":"3","key":"5257_CR32","doi-asserted-by":"publisher","first-page":"151","DOI":"10.1007\/s001459900025","volume":"10","author":"S Even","year":"1997","unstructured":"Even, S., Mansour, Y.: A construction of a cipher from a single pseudorandom permutation. J. Cryptol. 10(3), 151\u2013161 (1997)","journal-title":"J. Cryptol."},{"key":"5257_CR33","doi-asserted-by":"crossref","unstructured":"Chakraborti, A., Nandi, M., Talnikar, S., Yasuda, K.: On the composition of single-keyed tweakable Even-Mansour for achieving BBB security. IACR Trans. Symmetric Cryptol. 1\u201339 (2020)","DOI":"10.46586\/tosc.v2020.i2.1-39"},{"key":"5257_CR34","doi-asserted-by":"publisher","DOI":"10.1016\/j.ipl.2021.106172","volume":"173","author":"K Shinagawa","year":"2022","unstructured":"Shinagawa, K., Iwata, T.: Quantum attacks on Sum of Even-Mansour pseudorandom functions. Inf. Process. Lett. 173, 106172 (2022)","journal-title":"Inf. Process. Lett."},{"issue":"2","key":"5257_CR35","doi-asserted-by":"publisher","first-page":"153","DOI":"10.3390\/e24020153","volume":"24","author":"P Zhang","year":"2022","unstructured":"Zhang, P.: Quantum attacks on sum of Even-Mansour construction with linear key schedules. Entropy 24(2), 153 (2022)","journal-title":"Entropy"},{"issue":"1","key":"5257_CR36","doi-asserted-by":"publisher","first-page":"67","DOI":"10.1140\/epjqt\/s40507-025-00374-x","volume":"12","author":"Z Li","year":"2025","unstructured":"Li, Z., Fan, S., Gao, F., Hao, Y., Sun, H., Hu, X., Li, D.: Quantum attacks on Sum of Even-Mansour construction utilizing online classical queries. EPJ Quantum Technol. 12(1), 67 (2025)","journal-title":"EPJ Quantum Technol."},{"issue":"1","key":"5257_CR37","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1017\/S0960129516000013","volume":"28","author":"H Li","year":"2018","unstructured":"Li, H., Yang, L.: A quantum algorithm to approximate the linear structures of Boolean functions. Math. Struct. Comput. Sci. 28(1), 1\u201313 (2018)","journal-title":"Math. Struct. Comput. Sci."},{"issue":"5","key":"5257_CR38","doi-asserted-by":"publisher","first-page":"1161","DOI":"10.1007\/s10623-018-0510-5","volume":"87","author":"H Xie","year":"2019","unstructured":"Xie, H., Yang, L.: Using Bernstein\u2013Vazirani algorithm to attack block ciphers. Des. Codes Crypt. 87(5), 1161\u20131182 (2019)","journal-title":"Des. Codes Crypt."},{"issue":"1&2","key":"5257_CR39","first-page":"65","volume":"20","author":"X Hao","year":"2020","unstructured":"Hao, X., Zhang, F., Wei, Y., Zhou, Y.: Quantum period finding based on the Bernstein\u2013Vazirani algorithm. Quantum Inf. Comput. 20(1&2), 65\u201384 (2020)","journal-title":"Quantum Inf. Comput."},{"key":"5257_CR40","doi-asserted-by":"crossref","unstructured":"Sun, H.-W., Wei, C.-Y., Cai, B.-B., Qin, S.-J., Wen, Q.-Y., Gao, F.: Improved BV-based quantum attack on block ciphers. Quantum Inf. Process. 22(1) (2023)","DOI":"10.1007\/s11128-022-03752-x"},{"issue":"1","key":"5257_CR41","doi-asserted-by":"publisher","first-page":"83","DOI":"10.1140\/epjqt\/s40507-024-00295-1","volume":"11","author":"R-X Xu","year":"2024","unstructured":"Xu, R.-X., Sun, H.-W., Zhang, K.-J., Du, G., Li, D.-D.: Quantum differential cryptanalysis based on Bernstein\u2013Vazirani algorithm. EPJ Quantum Technol. 11(1), 83 (2024)","journal-title":"EPJ Quantum Technol."},{"key":"5257_CR42","doi-asserted-by":"crossref","unstructured":"Chen, Y.L., Lambooij, E., Mennink, B.: How to build pseudorandom functions from public random permutations. In: Annual International Cryptology Conference, pp. 266\u2013293 (2019)","DOI":"10.1007\/978-3-030-26948-7_10"},{"key":"5257_CR43","doi-asserted-by":"crossref","unstructured":"Bernstein, E., Vazirani, U.: Quantum complexity theory. In: Proceedings of the Twenty-Fifth Annual ACM symposium on Theory of computing, pp. 11\u201320 (1993)","DOI":"10.1145\/167088.167097"},{"key":"5257_CR44","doi-asserted-by":"publisher","first-page":"8579","DOI":"10.3390\/app14198579","volume":"14","author":"K Jang","year":"2024","unstructured":"Jang, K., Oh, Y., Seo, H.: Depth-optimized quantum circuit of Gauss-Jordan elimination. Appl. Sci. 14, 8579 (2024). https:\/\/doi.org\/10.3390\/app14198579","journal-title":"Appl. Sci."},{"issue":"6","key":"5257_CR45","doi-asserted-by":"publisher","first-page":"1381","DOI":"10.1007\/s10623-022-01045-z","volume":"90","author":"A Bhattacharjee","year":"2022","unstructured":"Bhattacharjee, A., Dutta, A., List, E., Nandi, M.: CENCPP$$^*$$: beyond-birthday-secure encryption from public permutations. Des. Codes Crypt. 90(6), 1381\u20131425 (2022)","journal-title":"Des. Codes Crypt."},{"issue":"5","key":"5257_CR46","doi-asserted-by":"publisher","first-page":"1145","DOI":"10.1007\/s12095-022-00571-w","volume":"14","author":"YL Chen","year":"2022","unstructured":"Chen, Y.L., Dutta, A., Nandi, M.: Multi-user BBB security of public permutations based MAC. Cryptogr. Commun. 14(5), 1145\u20131177 (2022)","journal-title":"Cryptogr. Commun."},{"issue":"3","key":"5257_CR47","volume":"6","author":"PJJ O\u2019Malley","year":"2016","unstructured":"O\u2019Malley, P.J.J., Babbush, R., Kivlichan, I.D., Romero, J., McClean, J.R., Barends, R., Kelly, J., Roushan, P., Tranter, A., Ding, N., et al.: Scalable quantum simulation of molecular energies. Phys. Rev. X 6(3), 031007 (2016)","journal-title":"Phys. Rev. X"},{"issue":"6","key":"5257_CR48","doi-asserted-by":"publisher","first-page":"422","DOI":"10.1038\/s42254-021-00314-5","volume":"3","author":"GE Karniadakis","year":"2021","unstructured":"Karniadakis, G.E., Kevrekidis, I.G., Lu, L., Perdikaris, P., Wang, S., Yang, L.: Physics-informed machine learning. Nat. Rev. Phys. 3(6), 422\u2013440 (2021)","journal-title":"Nat. Rev. Phys."},{"key":"5257_CR49","doi-asserted-by":"crossref","unstructured":"Bonnetain, X., Jaques, S.: Quantum period finding against symmetric primitives in practice (2020). Preprint at arXiv:2011.07022","DOI":"10.46586\/tches.v2022.i1.1-27"},{"key":"5257_CR50","doi-asserted-by":"crossref","unstructured":"Ankele, R., Klbl, S.: Mind the gap-A closer look at the security of block ciphers against differential cryptanalysis. In: International Conference on Selected Areas in Cryptography, pp. 163-190 (2018)","DOI":"10.1007\/978-3-030-10970-7_8"}],"container-title":["Quantum Information Processing"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s11128-026-05257-3.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s11128-026-05257-3","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s11128-026-05257-3.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,7,27]],"date-time":"2026-07-27T08:11:18Z","timestamp":1785139878000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s11128-026-05257-3"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,7,2]]},"references-count":50,"journal-issue":{"issue":"7","published-online":{"date-parts":[[2026,7]]}},"alternative-id":["5257"],"URL":"https:\/\/doi.org\/10.1007\/s11128-026-05257-3","relation":{},"ISSN":["1573-1332"],"issn-type":[{"value":"1573-1332","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,7,2]]},"assertion":[{"value":"28 February 2026","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"12 June 2026","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"2 July 2026","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"The authors declare no conflict of interest.","order":1,"name":"Ethics","label":"Conflict of interest","group":{"name":"EthicsHeading","label":"Declarations"}}],"article-number":"237"}}