{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,2,21]],"date-time":"2025-02-21T12:59:31Z","timestamp":1740142771504,"version":"3.37.3"},"reference-count":26,"publisher":"Oxford University Press (OUP)","issue":"4","license":[{"start":{"date-parts":[[2022,9,16]],"date-time":"2022-09-16T00:00:00Z","timestamp":1663286400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/academic.oup.com\/journals\/pages\/open_access\/funder_policies\/chorus\/standard_publication_model"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62072445"],"award-info":[{"award-number":["62072445"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2023,4,15]]},"abstract":"<jats:title>Abstract<\/jats:title><jats:p>3D is an Advanced Encryption Standard (AES)-like cipher employed 3D structure proposed in 2008. The main innovation of 3D is the multi-dimensional state, generalizing the design of Rijndael and allowing block sizes beyond the 256-bit boundary. Saturnin, a lightweight block cipher has been selected as a second-round candidate in the National Institute of Standards and Technology standardization for lightweight cryptography. It also employs a 3D structure and provides high security against quantum and classic attacks. The exchange-equivalence attacks proposed by Bardeh and R\u00f8njom consider how quadruples of plaintexts confirm distinguishable properties for AES. It is similar to the principle of yoyo attack, but it can find a longer number of rounds of distinguisher. In this paper, we investigate the exchange-equivalence attack on 3D and yoyo attack on Saturnin. Our new results turn out to be the first secret-key chosen plaintext distinguisher for 10-round 3D. The complexity of the distinguisher is about $2^{364.2}$ in terms of data, memory and computational complexity. For Saturnin, we propose the first six-super-round impossible differential yoyo attack, which is suitable for the two-S-layer version. Compared with the previous impossible differential attacks in the design report of Saturnin, the attacks presented here are the best in terms of the complexity under the chosen-plaintext scenario.<\/jats:p>","DOI":"10.1093\/comjnl\/bxac116","type":"journal-article","created":{"date-parts":[[2022,9,20]],"date-time":"2022-09-20T08:49:57Z","timestamp":1663663797000},"page":"1017-1029","source":"Crossref","is-referenced-by-count":0,"title":["Cryptanalysis on Reduced-Round 3D and Saturnin"],"prefix":"10.1093","volume":"66","author":[{"given":"Li","family":"Zhang","sequence":"first","affiliation":[{"name":"Trusted Computing and Information Assurance Laboratory, Institute of Software Chinese Academy of Sciences , Beijing 100190, China"},{"name":"State Key Laboratory of Cryptology , Beijing 100878, China"},{"name":"University of Chinese Academy of Sciences , Beijing 100049, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Wenling","family":"Wu","sequence":"additional","affiliation":[{"name":"Trusted Computing and Information Assurance Laboratory, Institute of Software Chinese Academy of Sciences , Beijing 100190, China"},{"name":"University of Chinese Academy of Sciences , Beijing 100049, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"YaFei","family":"Zheng","sequence":"additional","affiliation":[{"name":"Trusted Computing and Information Assurance Laboratory, Institute of Software Chinese Academy of Sciences , Beijing 100190, China"},{"name":"State Key Laboratory of Cryptology , Beijing 100878, China"},{"name":"University of Chinese Academy of Sciences , Beijing 100049, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Bolin","family":"Wang","sequence":"additional","affiliation":[{"name":"Trusted Computing and Information Assurance Laboratory, Institute of Software Chinese Academy of Sciences , Beijing 100190, China"},{"name":"University of Chinese Academy of Sciences , Beijing 100049, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"286","published-online":{"date-parts":[[2022,9,16]]},"reference":[{"key":"2023041809380554800_","first-page":"343","volume-title":"The Third Advanced Encryption Standard Candidate Conference","author":"Daemen","year":"2000"},{"key":"2023041809380554800_","first-page":"67","volume-title":"Selected Areas in Cryptography, 13th International Workshop, SAC 2006","author":"Biryukov","year":"2006"},{"key":"2023041809380554800_","first-page":"72","volume-title":"Information Security - 17th International Conference, ISC 2014","author":"Biryukov","year":"2014"},{"key":"2023041809380554800_","first-page":"511","volume-title":"Cryptographers\u2019 Track at the RSA Conference 2022, Virtual Event","author":"Bossert","year":"2020"},{"key":"2023041809380554800_","first-page":"252","volume-title":"Cryptology and Network Security, 7th International Conference, CANS 2008","author":"Nakahara","year":"2008"},{"key":"2023041809380554800_","first-page":"109","volume-title":"Information Security Practice and Experience - 8th International Conference, ISPEC 2012","author":"Koyama","year":"2012"},{"key":"2023041809380554800_","first-page":"208","volume-title":"Information Security Practice and Experience - 7th International Conference, ISPEC 2011","author":"Nakahara","year":"2011"},{"key":"2023041809380554800_","first-page":"196","volume-title":"Fast Software Encryption: Second International Workshop","author":"Knudsen","year":"1994"},{"key":"2023041809380554800_","doi-asserted-by":"crossref","first-page":"1763","DOI":"10.1109\/TC.2017.2699190","article-title":"Towards accurate statistical analysis of security margins: new searching strategies for differential attacks","volume":"66","author":"Chen","year":"2017","journal-title":"IEEE Trans. Comput."},{"key":"2023041809380554800_","doi-asserted-by":"crossref","first-page":"509","DOI":"10.3837\/tiis.2013.03.006","article-title":"Finding impossible differentials for Rijndael-like and 3D-like structures","volume":"7","author":"Cui","year":"2013","journal-title":"KSII Trans. Internet Inf. Syst."},{"key":"2023041809380554800_","first-page":"157","article-title":"Square attacks on 3D cipher","volume":"32","author":"Meiyi","year":"2010","journal-title":"J. Electron. Inform. Technol."},{"key":"2023041809380554800_","doi-asserted-by":"crossref","first-page":"19","DOI":"10.1142\/S0129054117500022","article-title":"Meet-in-the-middle attack on 11-round 3D block cipher","volume":"28","author":"Li","year":"2017","journal-title":"Int. J. Found. Comput. Sci."},{"key":"2023041809380554800_","doi-asserted-by":"crossref","first-page":"160","DOI":"10.46586\/tosc.v2020.iS1.160-207","article-title":"Saturnin: a suite of lightweight symmetric algorithms for post-quantum security","volume":"2020","author":"Canteaut","year":"2020","journal-title":"IACR Trans. Symmetric Cryptol."},{"key":"2023041809380554800_","first-page":"427","article-title":"Meet-in-the-middle attacks revisited: focusing on key-recovery and collision attacks","volume":"2021","author":"Dong","year":"2021","journal-title":"IACR Cryptol. ePrint Arch."},{"key":"2023041809380554800_","first-page":"bxab174","article-title":"Practical attacks on reduced-round 3D and Saturnin","author":"Hou","year":"2021","journal-title":"Comput. J."},{"key":"2023041809380554800_","doi-asserted-by":"crossref","first-page":"214","DOI":"10.1007\/978-3-662-49890-3_9","volume-title":"Advances in Cryptology - EUROCRYPT 2016 - 35th Annual International Conference on the Theory and Applications of Cryptographic Techniques","author":"Tiessen","year":"2016"},{"key":"2023041809380554800_","doi-asserted-by":"crossref","first-page":"289","DOI":"10.1007\/978-3-319-56614-6_10","volume-title":"Advances in Cryptology - EUROCRYPT 2017 - 36th Annual International Conference on the Theory and Applications of Cryptographic Techniques","author":"Grassi","year":"2017"},{"key":"2023041809380554800_","doi-asserted-by":"crossref","first-page":"217","DOI":"10.1007\/978-3-319-70694-8_8","volume-title":"Advances in Cryptology - ASIACRYPT 2017 - 23rd International Conference on the Theory and Applications of Cryptology and Information Security","author":"R\u00f8njom","year":"2017"},{"key":"2023041809380554800_","doi-asserted-by":"crossref","first-page":"347","DOI":"10.1007\/978-3-030-34618-8_12","volume-title":"Advances in Cryptology - ASIACRYPT 2019 - 25th International Conference on the Theory and Application of Cryptology and Information Security","author":"Bardeh","year":"2019"},{"key":"2023041809380554800_","doi-asserted-by":"crossref","first-page":"14","DOI":"10.1016\/j.cose.2018.07.018","article-title":"Security analysis and new models on the intelligent symmetric key encryption","volume":"80","author":"Zhou","year":"2019","journal-title":"Comput. Secur."},{"key":"2023041809380554800_","first-page":"362","volume-title":"Selected Areas in Cryptography \u201898, SAC\u201998","author":"Biham","year":"1998"},{"key":"2023041809380554800_","first-page":"102","volume-title":"Selected Areas in Cryptography - SAC 2015 - 22nd International Conference","author":"Biryukov","year":"2015"},{"key":"2023041809380554800_","first-page":"770","article-title":"A key-independent distinguisher for 6-round AES in an adaptive setting","volume":"2019","author":"Bardeh","year":"2019","journal-title":"IACR Cryptol. ePrint Arch."},{"key":"2023041809380554800_","doi-asserted-by":"crossref","first-page":"297","DOI":"10.1007\/978-3-030-23696-0_15","volume-title":"Progress in Cryptology - AFRICACRYPT 2019 - 11th International Conference on Cryptology in Africa","author":"Bardeh","year":"2019"},{"key":"2023041809380554800_","doi-asserted-by":"crossref","first-page":"114","DOI":"10.1007\/978-3-030-51938-4_6","volume-title":"Progress in Cryptology - AFRICACRYPT 2020 - 12th International Conference on Cryptology in Africa","author":"An","year":"2020"},{"key":"2023041809380554800_","doi-asserted-by":"crossref","first-page":"101","DOI":"10.1007\/s00145-016-9251-7","article-title":"Making the impossible possible","volume":"31","author":"Boura","year":"2018","journal-title":"J. Cryptol."}],"container-title":["The Computer Journal"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/academic.oup.com\/comjnl\/article-pdf\/66\/4\/1017\/49931954\/bxac116.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/academic.oup.com\/comjnl\/article-pdf\/66\/4\/1017\/49931954\/bxac116.pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,11,26]],"date-time":"2023-11-26T10:02:55Z","timestamp":1700992975000},"score":1,"resource":{"primary":{"URL":"https:\/\/academic.oup.com\/comjnl\/article\/66\/4\/1017\/6702391"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,9,16]]},"references-count":26,"journal-issue":{"issue":"4","published-online":{"date-parts":[[2022,9,16]]},"published-print":{"date-parts":[[2023,4,15]]}},"URL":"https:\/\/doi.org\/10.1093\/comjnl\/bxac116","relation":{},"ISSN":["0010-4620","1460-2067"],"issn-type":[{"type":"print","value":"0010-4620"},{"type":"electronic","value":"1460-2067"}],"subject":[],"published-other":{"date-parts":[[2023,4]]},"published":{"date-parts":[[2022,9,16]]}}}