{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,7,9]],"date-time":"2025-07-09T22:54:10Z","timestamp":1752101650890,"version":"3.37.3"},"reference-count":37,"publisher":"Oxford University Press (OUP)","issue":"9","license":[{"start":{"date-parts":[[2021,7,5]],"date-time":"2021-07-05T00:00:00Z","timestamp":1625443200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/academic.oup.com\/journals\/pages\/open_access\/funder_policies\/chorus\/standard_publication_model"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61902414","61672530","62002370"],"award-info":[{"award-number":["61902414","61672530","62002370"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100004761","name":"Natural Science Foundation of Hunan Province","doi-asserted-by":"crossref","award":["2020JJ5667"],"award-info":[{"award-number":["2020JJ5667"]}],"id":[{"id":"10.13039\/501100004761","id-type":"DOI","asserted-by":"crossref"}]},{"DOI":"10.13039\/501100003130","name":"Fonds Wetenschappelijk Onderzoek","doi-asserted-by":"publisher","award":["12ZH420N"],"award-info":[{"award-number":["12ZH420N"]}],"id":[{"id":"10.13039\/501100003130","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2022,9,16]]},"abstract":"<jats:title>Abstract<\/jats:title>\n               <jats:p>In this work, we investigate how the choice of the key-expansion algorithm and its interaction with the round function affect the resistance of Simon-like ciphers against rotational-XOR cryptanalysis. We observe that, among the key-expansion algorithms we consider, Simon is most resistant, while Simeck is much less so. Implications on lightweight ciphers design are discussed and open questions are proposed.<\/jats:p>","DOI":"10.1093\/comjnl\/bxab082","type":"journal-article","created":{"date-parts":[[2021,6,18]],"date-time":"2021-06-18T11:07:52Z","timestamp":1624014472000},"page":"2454-2469","source":"Crossref","is-referenced-by-count":3,"title":["On the Effect of the Key-Expansion Algorithm in Simon-like Ciphers"],"prefix":"10.1093","volume":"65","author":[{"given":"Jinyu","family":"Lu","sequence":"first","affiliation":[{"name":"College of Liberal Arts and Sciences , National University of Defense Technology, Hunan, Changsha 410073, P. R. China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yunwen","family":"Liu","sequence":"additional","affiliation":[{"name":"College of Liberal Arts and Sciences , National University of Defense Technology, Hunan, Changsha 410073, P. R. China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Tomer","family":"Ashur","sequence":"additional","affiliation":[{"name":"imec-COSIC KU Leuven , Leuven-Heverlee 3001, Belgium TU Eindhoven, Eindhoven 5600 MB, the Netherlands"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Chao","family":"Li","sequence":"additional","affiliation":[{"name":"College of Liberal Arts and Sciences , National University of Defense Technology, Hunan, Changsha 410073, P. R. China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"286","published-online":{"date-parts":[[2021,7,5]]},"reference":[{"key":"2022091610574280000_ref1","first-page":"50","article-title":"On the distribution of linear biases: three instructive examples","volume-title":"CRYPTO","author":"Abdelraheem","year":"2012"},{"volume-title":"[PATCH v2 0\/5] crypto: SPECK support. Linux kernel mailing list","year":"2018","author":"Ashur","key":"2022091610574280000_ref2"},{"key":"2022091610574280000_ref3","first-page":"411","article-title":"A block cipher for low energy","volume-title":"ASIACRYPT (2)","author":"Banik","year":"2015"},{"key":"2022091610574280000_ref4","first-page":"404","article-title":"The SIMON and SPECK families of lightweight block ciphers","volume":"2013","author":"Beaulieu","year":"2013","journal-title":"IACR Cryptol. ePrint Arch."},{"key":"2022091610574280000_ref5","first-page":"560","article-title":"Notes on the design and analysis of SIMON and SPECK","volume":"2017","author":"Beaulieu","year":"2017","journal-title":"IACR Cryptol. ePrint Arch."},{"key":"2022091610574280000_ref6","doi-asserted-by":"crossref","first-page":"208","DOI":"10.46586\/tosc.v2020.iS1.208-261","article-title":"Lightweight AEAD and hashing using the Sparkle permutation family","volume":"2020","author":"Beierle","year":"2020","journal-title":"IACR Trans. Symmetric Cryptol."},{"key":"2022091610574280000_ref7","first-page":"174","article-title":"An efficient SMT solver for bit-vectors and arrays","volume-title":"TACAS","author":"Brummayer","year":"2009"},{"key":"2022091610574280000_ref8","first-page":"337","article-title":"Z3: an efficient SMT solver","volume-title":"TACAS","author":"de Moura","year":"2008"},{"key":"2022091610574280000_ref9","first-page":"268","article-title":"MILP-based automatic search algorithms for differential and linear trails for SPECK","volume-title":"FSE","author":"Kai","year":"2016"},{"key":"2022091610574280000_ref10","first-page":"584","article-title":"Constraint programming models for chosen key differential cryptanalysis","volume-title":"CP","author":"G\u00e9rault","year":"2016"},{"key":"2022091610574280000_ref11","first-page":"326","article-title":"The LED block cipher","author":"Guo","year":"2011"},{"key":"2022091610574280000_ref12","doi-asserted-by":"crossref","DOI":"10.1016\/j.jisa.2021.102860","article-title":"Bit-Wise Cryptanalysis on AND-RX Permutation Friet-PC","author":"Ito","year":"2021"},{"key":"2022091610574280000_ref13","first-page":"216","article-title":"Applications of SAT solvers to AES key recovery from decayed key schedule images","volume-title":"ECURWARE","author":"Kamal","year":"2010"},{"key":"2022091610574280000_ref14","first-page":"161","article-title":"Observations on the SIMON block cipher family","volume-title":"CRYPTO (1)","author":"K\u00f6lbl","year":"2015"},{"key":"2022091610574280000_ref15","doi-asserted-by":"crossref","first-page":"88","DOI":"10.1587\/transfun.E101.A.88","article-title":"On the design rationale of SIMON block cipher: integral attacks and impossible differential attacks against SIMON variants","volume":"101-A","author":"Kondo","year":"2018","journal-title":"IEICE Trans. Fundam. Electron. Commun. Comput. Sci"},{"key":"2022091610574280000_ref16","doi-asserted-by":"crossref","first-page":"474","DOI":"10.46586\/tosc.v2017.i1.474-505","article-title":"Key schedules and tweakable block ciphers","volume":"2017","author":"Kranz","year":"2017","journal-title":"IACR Trans. Symmetric Cryptol"},{"key":"2022091610574280000_ref17","first-page":"17","article-title":"Markov ciphers and differential cryptanalysis","volume-title":"EUROCRYPT","author":"Lai","year":"1991"},{"key":"2022091610574280000_ref18","first-page":"219","article-title":"Automatic verification of differential characteristics: application to reduced Gimli","volume-title":"CRYPTO (3)","author":"Liu","year":"2020"},{"key":"2022091610574280000_ref19","doi-asserted-by":"crossref","first-page":"24","DOI":"10.46586\/tosc.v2017.i3.24-36","article-title":"Rotational-XOR cryptanalysis of reduced-round SPECK","volume":"2017","author":"Liu","year":"2017","journal-title":"IACR Trans. Symmetric Cryptol"},{"key":"2022091610574280000_ref20","doi-asserted-by":"crossref","first-page":"2289","DOI":"10.1007\/s10623-020-00782-3","article-title":"The phantom of differential characteristics","volume":"88","author":"Liu","year":"2020","journal-title":"Des. Codes Cryptogr."},{"volume-title":"Rotational-XOR cryptanalysis of Simon-like block ciphers","year":"2020","author":"Jinyu","key":"2022091610574280000_ref21"},{"key":"2022091610574280000_ref22","first-page":"105","article-title":"Rotational-XOR cryptanalysis of Simon-like block ciphers","volume-title":"ACISP","author":"Jinyu","year":"2020"},{"key":"2022091610574280000_ref23","first-page":"386","article-title":"Linear cryptanalysis method for DES cipher","volume-title":"EUROCRYPT","author":"Matsui","year":"1993"},{"key":"2022091610574280000_ref24","first-page":"54","article-title":"New block encryption algorithm MISTY","volume-title":"FSE","author":"Matsui","year":"1997"},{"article-title":"Towards finding optimal differential characteristics for ARX: application to Salsa20","year":"2013","author":"Mouha","key":"2022091610574280000_ref25"},{"key":"2022091610574280000_ref26","first-page":"57","article-title":"Differential and linear cryptanalysis using mixed-integer linear programming","volume-title":"Inscrypt","author":"Mouha","year":"2011"},{"key":"2022091610574280000_ref27","first-page":"632","article-title":"Proposing an MILP-based method for the experimental verification of difference trails","volume":"2020","author":"Sadeghi","year":"2020","journal-title":"IACR Cryptol. ePrint Arch."},{"key":"2022091610574280000_ref28","first-page":"379","article-title":"Automatic differential analysis of ARX block ciphers with application to SPECK and LEA","volume-title":"ACISP (2)","author":"Song","year":"2016"},{"key":"2022091610574280000_ref29","doi-asserted-by":"crossref","first-page":"12","DOI":"10.1049\/iet-ifs.2018.5283","article-title":"MILP-aided bit-based division property for primitives with non-bit-permutation linear layers","volume":"14","author":"Sun","year":"2020","journal-title":"IET Inf. Secur."},{"key":"2022091610574280000_ref30","doi-asserted-by":"crossref","first-page":"281","DOI":"10.46586\/tosc.v2017.i1.281-306","article-title":"Analysis of AES, SKINNY, and others with constraint programming","volume":"2017","author":"Sun","year":"2017","journal-title":"IACR Trans. Symmetric Cryptol."},{"key":"2022091610574280000_ref31","first-page":"158","article-title":"Automatic security evaluation and (related-key) differential characteristic search: application to SIMON, PRESENT, LBlock, DES(L) and other bit-oriented block ciphers","volume-title":"ASIACRYPT (1)","author":"Sun","year":"2014"},{"key":"2022091610574280000_ref32","first-page":"551","article-title":"Security evaluation against differential cryptanalysis for block cipher structures","volume":"2011","author":"Shengbao","year":"2011","journal-title":"IACR Cryptol. ePrint Arch."},{"key":"2022091610574280000_ref33","first-page":"327","article-title":"LBlock: a lightweight block cipher","volume-title":"ACNS","author":"Wu","year":"2011"},{"key":"2022091610574280000_ref34","first-page":"648","article-title":"Applying MILP method to searching integral distinguishers based on division property for 6 lightweight block ciphers","volume-title":"ASIACRYPT (1)","author":"Xiang","year":"2016"},{"key":"2022091610574280000_ref35","first-page":"61","article-title":"Improved cryptanalysis on SipHash","volume-title":"CANS","author":"Xin","year":"2019"},{"key":"2022091610574280000_ref36","first-page":"307","article-title":"The SIMECK family of lightweight block ciphers","volume-title":"CHES","author":"Yang","year":"2015"},{"key":"2022091610574280000_ref37","first-page":"194","article-title":"Structural evaluation for Simon-like designs against integral attack","volume-title":"ISPEC","author":"Zhang","year":"2016"}],"container-title":["The Computer Journal"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/academic.oup.com\/comjnl\/article-pdf\/65\/9\/2454\/45882217\/bxab082.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/academic.oup.com\/comjnl\/article-pdf\/65\/9\/2454\/45882217\/bxab082.pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,9,16]],"date-time":"2022-09-16T10:59:04Z","timestamp":1663325944000},"score":1,"resource":{"primary":{"URL":"https:\/\/academic.oup.com\/comjnl\/article\/65\/9\/2454\/6314722"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,7,5]]},"references-count":37,"journal-issue":{"issue":"9","published-online":{"date-parts":[[2021,7,5]]},"published-print":{"date-parts":[[2022,9,16]]}},"URL":"https:\/\/doi.org\/10.1093\/comjnl\/bxab082","relation":{},"ISSN":["0010-4620","1460-2067"],"issn-type":[{"type":"print","value":"0010-4620"},{"type":"electronic","value":"1460-2067"}],"subject":[],"published-other":{"date-parts":[[2022,9]]},"published":{"date-parts":[[2021,7,5]]}}}