{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,9]],"date-time":"2026-01-09T20:46:45Z","timestamp":1767991605233,"version":"3.49.0"},"reference-count":60,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"11","license":[{"start":{"date-parts":[[2012,11,1]],"date-time":"2012-11-01T00:00:00Z","timestamp":1351728000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Inform. Theory"],"published-print":{"date-parts":[[2012,11]]},"DOI":"10.1109\/tit.2012.2207880","type":"journal-article","created":{"date-parts":[[2012,8,1]],"date-time":"2012-08-01T18:05:21Z","timestamp":1343844321000},"page":"7002-7017","source":"Crossref","is-referenced-by-count":39,"title":["Low-Data Complexity Attacks on AES"],"prefix":"10.1109","volume":"58","author":[{"given":"Charles","family":"Bouillaguet","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Patrick","family":"Derbez","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Orr","family":"Dunkelman","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Pierre-Alain","family":"Fouque","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Nathan","family":"Keller","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Vincent","family":"Rijmen","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref39","first-page":"230","article-title":"A collision attack on 7 rounds of Rijndael","author":"gilbert","year":"2000","journal-title":"Proc 3rd AES Candidate Conf"},{"key":"ref38","first-page":"213","article-title":"Improved cryptanalysis of Rijndael","volume":"lncs 1978","author":"ferguson","year":"2001","journal-title":"Proc Fast Softw Encrypt"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-89255-7_33"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1016\/j.ipl.2010.02.007"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-34047-5_2"},{"key":"ref30","author":"dinur","year":"0","journal-title":"Side channel cube attacks on block ciphers"},{"key":"ref37","author":"dunkelman","year":"0","journal-title":"ALRED blues New attacks on AES-based MACs"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-17373-8_10"},{"key":"ref35","first-page":"393","article-title":"A practical-time attack on the A5\/3 cryptosystem used in third generation GSM telephony","volume":"lncs 6223","author":"dunkelman","year":"2010","journal-title":"Proc Crypto"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1007\/s10623-012-9612-7"},{"key":"ref60","doi-asserted-by":"crossref","first-page":"15","DOI":"10.1007\/978-3-540-74462-7_2","article-title":"Improved related-key impossible differential attacks on reduced-round AES-192","volume":"lncs 4356","author":"zhang","year":"2007","journal-title":"Proc Sel Areas Cryptogr"},{"key":"ref28","doi-asserted-by":"crossref","first-page":"116","DOI":"10.1007\/978-3-540-71039-4_7","article-title":"A meet-in-the-middle attack on 8-round AES","volume":"lncs 5086","author":"demirci","year":"2008","journal-title":"Proc Fast Softw Encrypt"},{"key":"ref27","author":"daemen","year":"0","journal-title":"The Pelican MAC function"},{"key":"ref29","article-title":"Rapport de Stage","author":"derbez","year":"2010","journal-title":"report of Internship at cole Normale Suprieure"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1049\/iet-ifs:20070078"},{"key":"ref1","article-title":"A novel impossible differential cryptanalysis of AES","author":"bahrak","year":"2007","journal-title":"presented at the Western Eur Workshop Res Cryptol"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-22792-9_10"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1080\/01611194.2011.632807"},{"key":"ref21","first-page":"39","article-title":"Improved impossible differential cryptanalysis of Rijndael and Crypton","volume":"lncs 2288","author":"cheon","year":"2002","journal-title":"Inf Security Cryptology"},{"key":"ref24","author":"daemen","year":"1998","journal-title":"NIST AES Proposal"},{"key":"ref23","doi-asserted-by":"crossref","first-page":"97","DOI":"10.1007\/978-3-540-71039-4_6","article-title":"Algebraic and slide attacks on KeeLoq","volume":"lncs 5086","author":"courtois","year":"2008","journal-title":"Proc Fast Softw Encrypt"},{"key":"ref26","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1007\/11502760_1","article-title":"A new MAC construction ALRED and a specific instance, ALPHA-MAC","volume":"lncs 3557","author":"daemen","year":"2005","journal-title":"Proc Fast Softw Encrypt"},{"key":"ref25","author":"daemen","year":"2002","journal-title":"The Design of Rijndael AESThe Advanced Encryption Standard"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-71039-4_2"},{"key":"ref51","year":"2001","journal-title":"Advanced Encryption Standard"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-76788-6_19"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-03356-8_13"},{"key":"ref57","author":"wu","year":"0","journal-title":"A flaw in the internal state recovery attack on ALPHA-MAC"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1016\/j.ipl.2004.02.018"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-36178-2_11"},{"key":"ref54","author":"stevens","year":"2006","journal-title":"Fast collision attack on MD5"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-03317-9_2"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1002\/sec.66"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4613-9314-6"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-74462-7_6"},{"key":"ref40","first-page":"557","article-title":"Breaking the F-FCSR-H stream cipher in real time","volume":"lncs 5350","author":"hell","year":"2008","journal-title":"Proc ASIACRYPT"},{"key":"ref12","article-title":"A new 128-bit key stream cipher LEX","author":"biryukov","year":"0","journal-title":"ECRYPT Stream Cipher Project Report 2005\/013"},{"key":"ref13","article-title":"The Tweak for LEX-128, LEX-192, LEX-256","author":"biryukov","year":"0","journal-title":"ECRYPT Stream Cipher Project Report 2006\/037"},{"key":"ref14","first-page":"299","article-title":"Key recovery attacks of practical complexity on AES-256 variants with up to 10 rounds","volume":"lncs 6110","author":"biryukov","year":"2010","journal-title":"Proc EUROCRYPT"},{"key":"ref15","first-page":"1","article-title":"Related-key cryptanalysis of the full AES-192 and AES-256","volume":"lncs 5912","author":"biryukov","year":"2009","journal-title":"Proc ASIACRYPT"},{"key":"ref16","first-page":"231","article-title":"Distinguisher and related-key attack on the full AES-256","volume":"lncs 5677","author":"biryukov","year":"2009","journal-title":"Proc Crypto"},{"key":"ref17","doi-asserted-by":"crossref","first-page":"245","DOI":"10.1007\/3-540-48519-8_18","article-title":"Slide attacks","volume":"lncs 1636","author":"biryukov","year":"1999","journal-title":"Proc Fast Softw Encrypt"},{"key":"ref18","first-page":"586","article-title":"Advanced slide attacks","volume":"lncs 1807","author":"biryukov","year":"2000","journal-title":"Proc EUROCRYPT"},{"key":"ref19","author":"bogdanov","year":"0","journal-title":"Cryptanalysis of the KeeLoq Block Cipher"},{"key":"ref4","article-title":"Sosemanuk, a Fast Software-Oriented Stream Cipher","author":"berbain","year":"2005","journal-title":"Submission to eSTREAM"},{"key":"ref3","article-title":"SHA-3 Proposal: ECHO (version 1.5)","author":"benadjila","year":"2009","journal-title":"The Keccak SHA-3 Submission"},{"key":"ref6","doi-asserted-by":"crossref","first-page":"124","DOI":"10.1007\/3-540-48519-8_10","article-title":"Miss in the middle attacks on IDEA and Khufu","volume":"lncs 1636","author":"biham","year":"1999","journal-title":"Proc Fast Software Encryption"},{"key":"ref5","article-title":"Understanding brute force","author":"bernstein","year":"2005","journal-title":"Proc ECRYPT STVL Workshop Symmetric Key Encryption (SKEW)"},{"key":"ref8","article-title":"The SHAvite-3 Hash Function","author":"biham","year":"2009","journal-title":"The Keccak SHA-3 Submission"},{"key":"ref7","first-page":"12","article-title":"Cryptanalysis of skipjack reduced to 31 rounds","volume":"lncs 1592","author":"biham","year":"1999","journal-title":"Proc EUROCRYPT"},{"key":"ref49","first-page":"215","article-title":"Attacking seven rounds of Rijndael under 192-bit and 256-bit keys","author":"lucks","year":"2000","journal-title":"Proc 3rd AES Candidate Conf"},{"key":"ref9","author":"biham","year":"1999","journal-title":"Cryptanalysis of Reduced Variants of Rijndael"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-76900-2_19"},{"key":"ref45","doi-asserted-by":"crossref","first-page":"225","DOI":"10.1007\/978-3-540-74619-5_15","article-title":"Related-key rectangle attacks on reduced AES-192 and AES-256","volume":"lncs 4593","author":"kim","year":"2007","journal-title":"Proc Fast Softw Encrypt"},{"key":"ref48","first-page":"279","article-title":"New impossible differential attacks on AES","volume":"lncs 5365","author":"lu","year":"2008","journal-title":"Proc Indocrypt"},{"key":"ref47","article-title":"The Hash Function Hamsi","author":"kk","year":"2009","journal-title":"The Keccak SHA-3 Submission"},{"key":"ref42","doi-asserted-by":"crossref","first-page":"290","DOI":"10.1007\/978-3-642-21702-9_17","article-title":"A single-key attack on the full GOST block cipher","volume":"lncs 6733","author":"isobe","year":"2011","journal-title":"Proc Fast Softw Encrypt"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-78967-3_1"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-00862-7_11"},{"key":"ref43","doi-asserted-by":"crossref","first-page":"167","DOI":"10.1007\/978-3-540-74619-5_11","article-title":"A new class of weak keys for blowfish","volume":"lncs 4593","author":"kara","year":"2007","journal-title":"Proc Fast Softw Encrypt"}],"container-title":["IEEE Transactions on Information Theory"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx5\/18\/6331669\/06256730.pdf?arnumber=6256730","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,10,10]],"date-time":"2021-10-10T23:51:22Z","timestamp":1633909882000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/6256730\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2012,11]]},"references-count":60,"journal-issue":{"issue":"11"},"URL":"https:\/\/doi.org\/10.1109\/tit.2012.2207880","relation":{},"ISSN":["0018-9448","1557-9654"],"issn-type":[{"value":"0018-9448","type":"print"},{"value":"1557-9654","type":"electronic"}],"subject":[],"published":{"date-parts":[[2012,11]]}}}