{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,28]],"date-time":"2026-09-28T13:39:56Z","timestamp":1790602796092,"version":"4.1.0"},"reference-count":41,"publisher":"Springer Science and Business Media LLC","issue":"1","license":[{"start":{"date-parts":[[2024,9,10]],"date-time":"2024-09-10T00:00:00Z","timestamp":1725926400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by-nc-nd\/4.0"},{"start":{"date-parts":[[2024,9,10]],"date-time":"2024-09-10T00:00:00Z","timestamp":1725926400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by-nc-nd\/4.0"}],"funder":[{"name":"Ministry of Internal Affairs and Communications, Japan.","award":["JPJ000254"],"award-info":[{"award-number":["JPJ000254"]}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Sci Rep"],"DOI":"10.1038\/s41598-024-69188-8","type":"journal-article","created":{"date-parts":[[2024,9,10]],"date-time":"2024-09-10T12:03:25Z","timestamp":1725969805000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":13,"title":["Implementing Grover\u2019s on AES-based AEAD schemes"],"prefix":"10.1038","volume":"14","author":[{"given":"Surajit","family":"Mandal","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ravi","family":"Anand","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Mostafizar","family":"Rahman","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Santanu","family":"Sarkar","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Takanori","family":"Isobe","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2024,9,10]]},"reference":[{"key":"69188_CR1","doi-asserted-by":"publisher","unstructured":"Shor, P.\u00a0W. Algorithms for quantum computation: Discrete logarithms and factoring. In 35th Annual Symposium on Foundations of Computer Science, Santa Fe, New Mexico, USA, 20-22 November 1994, 124\u2013134, https:\/\/doi.org\/10.1109\/SFCS.1994.365700 (IEEE Computer Society).","DOI":"10.1109\/SFCS.1994.365700"},{"key":"69188_CR2","doi-asserted-by":"publisher","first-page":"1484","DOI":"10.1137\/S0097539795293172","volume":"26","author":"PW Shor","year":"1997","unstructured":"Shor, P. W. Polynomial-time algorithms for prime factorization and discrete logarithms on a quantum computer. SIAM J. Comput. 26, 1484\u20131509. https:\/\/doi.org\/10.1137\/S0097539795293172 (1997).","journal-title":"SIAM J. Comput."},{"key":"69188_CR3","doi-asserted-by":"crossref","unstructured":"Grassl, M., Langenberg, B., Roetteler, M. & Steinwandt, R. Applying grover\u2019s algorithm to aes: quantum resource estimates. In Post-Quantum Cryptography: 7th International Workshop, PQCrypto 2016, Fukuoka, Japan, February 24-26, 2016, Proceedings 7, 29\u201343 (Springer, 2016).","DOI":"10.1007\/978-3-319-29360-8_3"},{"key":"69188_CR4","first-page":"854","volume":"2","author":"B Langenberg","year":"2019","unstructured":"Langenberg, B., Pham, H. & Steinwandt, R. Reducing the cost of implementing AES as a quantum circuit. IACR Cryptol. ePrint Arch. 2, 854 (2019).","journal-title":"IACR Cryptol. ePrint Arch."},{"key":"69188_CR5","doi-asserted-by":"publisher","unstructured":"Jaques, S., Naehrig, M., Roetteler, M. & Virdia, F. Implementing grover oracles for quantum key search on AES and lowmc. In Canteaut, A. & Ishai, Y. (eds.) Advances in Cryptology - EUROCRYPT 2020 - 39th Annual International Conference on the Theory and Applications of Cryptographic Techniques, Zagreb, Croatia, May 10-14, 2020, Proceedings, Part II, vol. 12106 of Lecture Notes in Computer Science, 280\u2013310, https:\/\/doi.org\/10.1007\/978-3-030-45724-2_10 (Springer).","DOI":"10.1007\/978-3-030-45724-2_10"},{"key":"69188_CR6","unstructured":"Kuwakado, H. & Morii, M. Security on the quantum-type even-mansour cipher. In Proceedings of the International Symposium on Information Theory and its Applications, ISITA 2012, Honolulu, HI, USA, October 28-31, 2012, 312\u2013316 (2012)."},{"key":"69188_CR7","first-page":"733","volume":"6","author":"V Ulitzsch","year":"2022","unstructured":"Ulitzsch, V. & Seifert, J. Breaking the quadratic barrier: Quantum cryptanalysis of milenage, telecommunications\u2019 cryptographic backbone. IACR Cryptol. ePrint Arch. 6, 733 (2022).","journal-title":"IACR Cryptol. ePrint Arch."},{"key":"69188_CR8","doi-asserted-by":"publisher","unstructured":"Hosoyamada, A. & Sasaki, Y. Quantum demiric-sel\u00e7uk meet-in-the-middle attacks: Applications to 6-round generic feistel constructions. In Catalano, D. & Prisco, R.\u00a0D. (eds.) Security and Cryptography for Networks - 11th International Conference, SCN 2018, Amalfi, Italy, September 5-7, 2018, Proceedings, vol. 11035 of Lecture Notes in Computer Science, 386\u2013403, https:\/\/doi.org\/10.1007\/978-3-319-98113-0_21 (2018).","DOI":"10.1007\/978-3-319-98113-0_21"},{"key":"69188_CR9","doi-asserted-by":"publisher","unstructured":"Hosoyamada, A. & Sasaki, Y. Cryptanalysis Against Symmetric-Key Schemes with Online Classical Queries and Offline Quantum Computations. In Smart, N.\u00a0P. (ed.) Topics in Cryptology - CT-RSA 2018 - The Cryptographers\u2019 Track at the RSA Conference 2018, San Francisco, CA, USA, April 16-20, 2018, Proceedings, vol. 10808 of Lecture Notes in Computer Science, 198\u2013218, https:\/\/doi.org\/10.1007\/978-3-319-76953-0_11 (2018).","DOI":"10.1007\/978-3-319-76953-0_11"},{"key":"69188_CR10","unstructured":"Kaplan, M. Quantum attacks against iterated block ciphers. CoRRabs\/1410.1434 (2014). 1410.1434."},{"key":"69188_CR11","doi-asserted-by":"publisher","unstructured":"Kaplan, M., Leurent, G., Leverrier, A. & Naya-Plasencia, M. Quantum differential and linear cryptanalysis. IACR Trans. Symmetric Cryptol.2016, 71\u201394, https:\/\/doi.org\/10.13154\/tosc.v2016.i1.71-94 (2016).","DOI":"10.13154\/tosc.v2016.i1.71-94"},{"key":"69188_CR12","doi-asserted-by":"publisher","unstructured":"Kaplan, M., Leurent, G., Leverrier, A. & Naya-Plasencia, M. Breaking symmetric cryptosystems using quantum period finding. In Robshaw, M. & Katz, J. (eds.) Advances in Cryptology - CRYPTO 2016 - 36th Annual International Cryptology Conference, Santa Barbara, CA, USA, August 14-18, 2016, Proceedings, Part II, vol. 9815 of Lecture Notes in Computer Science, 207\u2013237, https:\/\/doi.org\/10.1007\/978-3-662-53008-5_8 (2016).","DOI":"10.1007\/978-3-662-53008-5_8"},{"key":"69188_CR13","doi-asserted-by":"publisher","first-page":"340","DOI":"10.1007\/s11128-020-02844-w","volume":"19","author":"R Anand","year":"2020","unstructured":"Anand, R., Maitra, A. & Mukhopadhyay, S. Grover on simon. Quant. Inf. Process. 19, 340. https:\/\/doi.org\/10.1007\/s11128-020-02844-w (2020).","journal-title":"Quant. Inf. Process."},{"key":"69188_CR14","doi-asserted-by":"publisher","unstructured":"Anand, R., Maitra, A. & Mukhopadhyay, S. Evaluation of quantum cryptanalysis on SPECK. In Bhargavan, K., Oswald, E. & Prabhakaran, M. (eds.) Progress in Cryptology - INDOCRYPT 2020 - 21st International Conference on Cryptology in India, Bangalore, India, December 13-16, 2020, Proceedings, vol. 12578 of Lecture Notes in Computer Science, 395\u2013413, https:\/\/doi.org\/10.1007\/978-3-030-65277-7_18 (Springer).","DOI":"10.1007\/978-3-030-65277-7_18"},{"key":"69188_CR15","first-page":"640","volume":"8","author":"K Jang","year":"2020","unstructured":"Jang, K., Choi, S., Kwon, H. & Seo, H. Grover on SPECK: Quantum resource estimates. IACR Cryptol. ePrint Arch. 8, 640 (2020).","journal-title":"IACR Cryptol. ePrint Arch."},{"key":"69188_CR16","first-page":"1405","volume":"9","author":"K Jang","year":"2020","unstructured":"Jang, K., Kim, H., Eum, S. & Seo, H. Grover on GIFT. IACR Cryptol. ePrint Arch. 9, 1405 (2020).","journal-title":"IACR Cryptol. ePrint Arch."},{"key":"69188_CR17","doi-asserted-by":"publisher","first-page":"4776","DOI":"10.3390\/app11114776","volume":"11","author":"K Jang","year":"2021","unstructured":"Jang, K. et al. Efficient implementation of present and gift on quantum computers. Appl. Sci. 11, 4776 (2021).","journal-title":"Appl. Sci."},{"key":"69188_CR18","doi-asserted-by":"publisher","first-page":"394","DOI":"10.1007\/s11128-021-03322-7","volume":"20","author":"BN Bathe","year":"2021","unstructured":"Bathe, B. N., Anand, R. & Dutta, S. Evaluation of grover\u2019s algorithm toward quantum cryptanalysis on chacha. Quant. Inf. Process. 20, 394. https:\/\/doi.org\/10.1007\/s11128-021-03322-7 (2021).","journal-title":"Quant. Inf. Process."},{"key":"69188_CR19","doi-asserted-by":"publisher","first-page":"395","DOI":"10.1007\/s11128-021-03307-6","volume":"20","author":"A Baksi","year":"2021","unstructured":"Baksi, A., Jang, K., Song, G., Seo, H. & Xiang, Z. Quantum implementation and resource estimates for rectangle and knot. Quant. Inf. Process. 20, 395. https:\/\/doi.org\/10.1007\/s11128-021-03307-6 (2021).","journal-title":"Quant. Inf. Process."},{"key":"69188_CR20","first-page":"647","volume":"3","author":"K Jang","year":"2022","unstructured":"Jang, K., Baksi, A., Breier, J., Seo, H. & Chattopadhyay, A. Quantum implementation and analysis of DEFAULT. IACR Cryptol. ePrint Arch. 3, 647 (2022).","journal-title":"IACR Cryptol. ePrint Arch."},{"key":"69188_CR21","doi-asserted-by":"publisher","unstructured":"Huang, Z. & Sun, S. Synthesizing quantum circuits of AES with lower t-depth and less qubits. In Agrawal, S. & Lin, D. (eds.) Advances in Cryptology - ASIACRYPT 2022 - 28th International Conference on the Theory and Application of Cryptology and Information Security, Taipei, Taiwan, December 5-9, 2022, Proceedings, Part III, vol. 13793 of Lecture Notes in Computer Science, 614\u2013644, https:\/\/doi.org\/10.1007\/978-3-031-22969-5_21 (Springer).","DOI":"10.1007\/978-3-031-22969-5_21"},{"key":"69188_CR22","unstructured":"Fowler, A.\u00a0G. Time-optimal quantum computation. arXiv preprint arXiv:1210.4626 (2012)."},{"key":"69188_CR23","unstructured":"Nist. NIST Post-Quantum Cryptographyhttps:\/\/csrc.nist.gov\/CSRC\/media\/Projects\/Post-Quantum-Cryptography\/documents\/call-for-proposals-final-dec-2016.pdf (2016)."},{"key":"69188_CR24","doi-asserted-by":"crossref","unstructured":"Jean, J. & Nikoli\u0107, I. Efficient design strategies based on the aes round function. In Fast Software Encryption: 23rd International Conference, FSE 2016, Bochum, Germany, March 20-23, 2016, Revised Selected Papers 23, 334\u2013353 (Springer, 2016).","DOI":"10.1007\/978-3-662-52993-5_17"},{"key":"69188_CR25","unstructured":"Wu, H. & Preneel, B. Aegis: a fast authenticated encryption algorithm (v1. 1) caesar competition."},{"key":"69188_CR26","unstructured":"Nikolic, I. Tiaoxin-346. Submission to the CAESAR competition1 (2014)."},{"key":"69188_CR27","doi-asserted-by":"publisher","first-page":"112","DOI":"10.1007\/s11128-018-1864-3","volume":"17","author":"M Almazrooie","year":"2018","unstructured":"Almazrooie, M., Samsudin, A., Abdullah, R. & Mutter, K. N. Quantum reversible circuit of AES-128. Quant. Inf. Process. 17, 112. https:\/\/doi.org\/10.1007\/s11128-018-1864-3 (2018).","journal-title":"Quant. Inf. Process."},{"key":"69188_CR28","first-page":"683","volume":"4","author":"K Jang","year":"2022","unstructured":"Jang, K. et al. Quantum analysis of AES. IACR Cryptol. ePrint Arch. 4, 683 (2022).","journal-title":"IACR Cryptol. ePrint Arch."},{"key":"69188_CR29","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1109\/TQE.2020.2965697","volume":"1","author":"B Langenberg","year":"2020","unstructured":"Langenberg, B., Pham, H. & Steinwandt, R. Reducing the cost of implementing the advanced encryption standard as a quantum circuit. IEEE Trans. Quant. Eng. 1, 1\u201312 (2020).","journal-title":"IEEE Trans. Quant. Eng."},{"key":"69188_CR30","doi-asserted-by":"publisher","unstructured":"Zou, J., Wei, Z., Sun, S., Liu, X. & Wu, W. Quantum circuit implementations of AES with fewer qubits. In Moriai, S. & Wang, H. (eds.) Advances in Cryptology - ASIACRYPT 2020 - 26th International Conference on the Theory and Application of Cryptology and Information Security, Daejeon, South Korea, December 7-11, 2020, Proceedings, Part II, vol. 12492 of Lecture Notes in Computer Science, 697\u2013726, https:\/\/doi.org\/10.1007\/978-3-030-64834-3_24 (Springer).","DOI":"10.1007\/978-3-030-64834-3_24"},{"key":"69188_CR31","doi-asserted-by":"publisher","unstructured":"Nist. NIST Post-Quantum Cryptographyhttps:\/\/doi.org\/10.6028\/NIST.FIPS.205.ipd (2016).","DOI":"10.6028\/NIST.FIPS.205.ipd"},{"key":"69188_CR32","doi-asserted-by":"crossref","unstructured":"Jaques, S., Naehrig, M., Roetteler, M. & Virdia, F. Implementing grover oracles for quantum key search on aes and lowmc. In Advances in Cryptology\u2013EUROCRYPT 2020: 39th Annual International Conference on the Theory and Applications of Cryptographic Techniques, Zagreb, Croatia, May 10\u201314, 2020, Proceedings, Part II 30, 280\u2013310.","DOI":"10.1007\/978-3-030-45724-2_10"},{"key":"69188_CR33","doi-asserted-by":"publisher","DOI":"10.1103\/PhysRevA.87.042302","volume":"87","author":"P Selinger","year":"2013","unstructured":"Selinger, P. Quantum circuits of t-depth one. Phys. Rev. A 87, 042302 (2013).","journal-title":"Phys. Rev. A"},{"key":"69188_CR34","doi-asserted-by":"publisher","unstructured":"Grover, L.\u00a0K. A fast quantum mechanical algorithm for database search. In Miller, G.\u00a0L. (ed.) Proceedings of the Twenty-Eighth Annual ACM Symposium on the Theory of Computing, Philadelphia, Pennsylvania, USA, May 22-24, 1996, 212\u2013219, https:\/\/doi.org\/10.1145\/237814.237866 (ACM).","DOI":"10.1145\/237814.237866"},{"key":"69188_CR35","doi-asserted-by":"crossref","unstructured":"Jaques, S. & Schanck, J.\u00a0M. Quantum cryptanalysis in the ram model: Claw-finding attacks on sike. In Advances in Cryptology\u2013CRYPTO 2019: 39th Annual International Cryptology Conference, Santa Barbara, CA, USA, August 18\u201322, 2019, Proceedings, Part I 39, 32\u201361 (Springer, 2019).","DOI":"10.1007\/978-3-030-26948-7_2"},{"key":"69188_CR36","doi-asserted-by":"publisher","first-page":"339","DOI":"10.1007\/s11128-018-2107-3","volume":"17","author":"P Kim","year":"2018","unstructured":"Kim, P., Han, D. & Jeong, K. C. Time-space complexity of quantum search algorithms in symmetric cryptanalysis: Applying to AES and SHA-2. Quant. Inf. Process. 17, 339. https:\/\/doi.org\/10.1007\/s11128-018-2107-3 (2018).","journal-title":"Quant. Inf. Process."},{"key":"69188_CR37","doi-asserted-by":"publisher","first-page":"2746","DOI":"10.1103\/PhysRevA.60.2746","volume":"60","author":"C Zalka","year":"1999","unstructured":"Zalka, C. Grover\u2019s quantum searching algorithm is optimal. Phys. Rev. A 60, 2746 (1999).","journal-title":"Phys. Rev. A"},{"key":"69188_CR38","unstructured":"Trefethen, L.\u00a0N. & Bau, D. Numerical Linear Algebra, vol. 181 (2022)."},{"key":"69188_CR39","doi-asserted-by":"publisher","unstructured":"Xiang, Z., Zeng, X., Lin, D., Bao, Z. & Zhang, S. Optimizing implementations of linear layers. IACR Trans. Symmetric Cryptol.2020, 120\u2013145, https:\/\/doi.org\/10.13154\/tosc.v2020.i2.120-145 (2020).","DOI":"10.13154\/tosc.v2020.i2.120-145"},{"key":"69188_CR40","doi-asserted-by":"publisher","first-page":"164","DOI":"10.1007\/s11128-023-03908-3","volume":"22","author":"R Anand","year":"2023","unstructured":"Anand, R. & Isobe, T. Quantum security analysis of rocca. Quant. Inf. Process. 22, 164 (2023).","journal-title":"Quant. Inf. Process."},{"key":"69188_CR41","first-page":"134","volume":"16","author":"N Wiebe","year":"2016","unstructured":"Wiebe, N. & Roetteler, M. Quantum arithmetic and numerical analysis using repeat-until-success circuits. Quant. Inf. Comput. 16, 134\u2013178 (2016).","journal-title":"Quant. Inf. Comput."}],"container-title":["Scientific Reports"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.nature.com\/articles\/s41598-024-69188-8.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/www.nature.com\/articles\/s41598-024-69188-8","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/www.nature.com\/articles\/s41598-024-69188-8.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,9,13]],"date-time":"2024-09-13T17:14:38Z","timestamp":1726247678000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.nature.com\/articles\/s41598-024-69188-8"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,9,10]]},"references-count":41,"journal-issue":{"issue":"1","published-online":{"date-parts":[[2024,12]]}},"alternative-id":["69188"],"URL":"https:\/\/doi.org\/10.1038\/s41598-024-69188-8","relation":{},"ISSN":["2045-2322"],"issn-type":[{"value":"2045-2322","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,9,10]]},"assertion":[{"value":"14 December 2023","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"1 August 2024","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"10 September 2024","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"The authors declare no competing interests.","order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Competing interests"}}],"article-number":"21105"}}