{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,31]],"date-time":"2026-08-31T21:41:42Z","timestamp":1788212502529,"version":"build-2803163510"},"reference-count":24,"publisher":"Institute of Electronics, Information and Communications Engineers (IEICE)","issue":"3","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEICE Trans. Fundamentals"],"published-print":{"date-parts":[[2026,3,1]]},"DOI":"10.1587\/transfun.2025cip0009","type":"journal-article","created":{"date-parts":[[2025,8,18]],"date-time":"2025-08-18T22:06:07Z","timestamp":1755554767000},"page":"280-289","source":"Crossref","is-referenced-by-count":2,"title":["Advancing DFA on Ascon: A Practical Key-Recovery Attack Using Bit-Flip Faults"],"prefix":"10.1587","volume":"E109.A","author":[{"given":"Soki","family":"NAKAMURA","sequence":"first","affiliation":[{"name":"Department of Informatics, The University of Electro-Communications"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Daiki","family":"MIYAHARA","sequence":"additional","affiliation":[{"name":"Department of Informatics, The University of Electro-Communications"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yang","family":"LI","sequence":"additional","affiliation":[{"name":"Department of Informatics, The University of Electro-Communications"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Kazuo","family":"SAKIYAMA","sequence":"additional","affiliation":[{"name":"Department of Informatics, The University of Electro-Communications"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"532","reference":[{"key":"1","unstructured":"[1] D. Christoph, E. Maria, M. Florian, and S. Martin, \u201cAscon v1.2.submission to NIST,\u201d 2021."},{"key":"2","unstructured":"[2] NIST, \u201cNIST IR 8454 status report on the final round of the NIST lightweight cryptography standardization process,\u201d Technical Report, NIST IR 8454, NIST: National Institute of Standards and Technology, 2023. Available at https:\/\/www.nist.gov"},{"key":"3","unstructured":"[3] K. Sakiyama, \u201cLiterature review on implementation performance of the NIST lightweight cryptographic standard Ascon,\u201d CRYPTREC External Evaluation Reports, Document ID: CRYPTREC EX-3301-2023, 2023."},{"key":"4","doi-asserted-by":"crossref","unstructured":"[4] C. Tezcan, \u201cTruncated, impossible, and improbable differential analysis of Ascon,\u201d Cryptology ePrint Archive, Paper 2016\/490, 2016.","DOI":"10.5220\/0005689903250332"},{"key":"5","doi-asserted-by":"publisher","unstructured":"[5] Y. Li, G. Zhang, W. Wang, and M. Wang, \u201cCryptanalysis of round-reduced ascon,\u201d Sci. China Inf. Sci., vol.60, no.3, p.38102, 2017. 10.1007\/s11432-016-0283-3","DOI":"10.1007\/s11432-016-0283-3"},{"key":"6","doi-asserted-by":"publisher","unstructured":"[6] Z. Li, X. Dong, and X. Wang, \u201cConditional cube attack on round-reduced ASCON,\u201d IACR Transactions on Symmetric Cryptology, vol.2017, no.1, pp.175-202, 2017. 10.46586\/tosc.v2017.i1.175-202","DOI":"10.46586\/tosc.v2017.i1.175-202"},{"key":"7","doi-asserted-by":"crossref","unstructured":"[7] X. Yu, F. Liu, G. Wang, S. Sun, and W. Meier, \u201cA closer look at the S-box: Deeper analysis of round-reduced ASCON-HASH,\u201d Cryptology ePrint Archive, Paper 2023\/865, 2023.","DOI":"10.1007\/978-3-031-53368-6_2"},{"key":"8","doi-asserted-by":"publisher","unstructured":"[8] Y. Naito, Y. Sasaki, and T. Sugawara, \u201cCommitting security of Ascon: Cryptanalysis on primitive and proof on mode,\u201d IACR Transactions on Symmetric Cryptology, vol.2023, no.4, pp.420-451, 2023. 10.46586\/tosc.v2023.i4.420-451","DOI":"10.46586\/tosc.v2023.i4.420-451"},{"key":"9","doi-asserted-by":"publisher","unstructured":"[9] P.C. Kocher, J. Jaffe, and B. Jun, \u201cDifferential power analysis,\u201d Advances in Cryptology\u2006\u2014\u2006CRYPTO\u201999, 19th Annual International Cryptology Conference, Santa Barbara, California, USA, Aug. 1999, Proceedings, Lecture Notes in Computer Science, vol.1666, pp.388-397, Springer, 1999. 10.1007\/3-540-48405-1_25","DOI":"10.1007\/3-540-48405-1_25"},{"key":"10","doi-asserted-by":"publisher","unstructured":"[10] E. Brier, C. Clavier, and F. Olivier, \u201cCorrelation power analysis with a leakage model,\u201d Cryptographic Hardware and Embedded Systems - CHES 2004, M. Joye and J.J. Quisquater, eds., Berlin, Heidelberg, pp.16-29, Springer Berlin Heidelberg, 2004. 10.1007\/978-3-540-28632-5_2","DOI":"10.1007\/978-3-540-28632-5_2"},{"key":"11","unstructured":"[11] C. Giraud and H. Thiebeauld, \u201cA survey on fault attacks,\u201d Smart Card Research and Advanced Applications VI, IFIP 18th World Computer Congress, TC8\/WG8.8 & TC11\/WG11.2 Sixth International Conference on Smart Card Research and Advanced Applications (CARDIS), Aug. 2004, Toulouse, France, J.J. Quisquater, P. Paradinas, Y. Deswarte, and A.A.E. Kalam, eds., pp.159-176, Kluwer\/Springer, 2004. 10.1007\/1-4020-8147-2_11"},{"key":"12","doi-asserted-by":"crossref","unstructured":"[12] J. Breier and X. Hou, \u201cHow practical are fault injection attacks, really?,\u201d Cryptology ePrint Archive, Paper 2022\/301, 2022.","DOI":"10.1109\/ACCESS.2022.3217212"},{"key":"13","doi-asserted-by":"publisher","unstructured":"[13] D. Boneh, R.A. DeMillo, and R.J. Lipton, \u201cOn the importance of checking cryptographic protocols for faults (extended abstract),\u201d Advances in Cryptology\u2006\u2014\u2006EUROCRYPT\u201997, International Conference on the Theory and Application of Cryptographic Techniques, Konstanz, Germany, May 1997, Proceeding, Lecture Notes in Computer Science, vol.1233, pp.37-51, Springer, 1997. 10.1007\/3-540-69053-0_4","DOI":"10.1007\/3-540-69053-0_4"},{"key":"14","doi-asserted-by":"publisher","unstructured":"[14] E. Biham and A. Shamir, \u201cDifferential fault analysis of secret key cryptosystems,\u201d Advances in Cryptology\u2006\u2014\u2006CRYPTO\u201997, 17th Annual International Cryptology Conference, Santa Barbara, California, USA, Aug. 1997, Proceedings, Lecture Notes in Computer Science, vol.1294, pp.513-525, Springer, 1997. 10.1007\/bfb0052259","DOI":"10.1007\/BFb0052259"},{"key":"15","doi-asserted-by":"crossref","unstructured":"[15] L. Hemme, M. Joye, and J.J. Quisquater, \u201cA differential fault attack against early rounds of (triple-)DES,\u201d Cryptographic Hardware and Embedded Systems - CHES 2004, Lecture Notes in Computer Science, vol.3156, pp.254-267, Springer Berlin Heidelberg, Germany, 2004. 10.1007\/978-3-540-28632-5_19","DOI":"10.1007\/978-3-540-28632-5_19"},{"key":"16","unstructured":"[16] N.T. Courtois, K. Jackson, and D. Ware, \u201cFault-algebraic attacks on inner rounds of DES,\u201d E-Smart\u201910 Proceedings: The Future of Digital Security Technologies, Strategies Telecom and Multimedia, 2010."},{"key":"17","doi-asserted-by":"crossref","unstructured":"[17] T. Fuhr, \u00c9liane Jaulmes, V. Lomn\u00e9, and A. Thillard, \u201cFault attacks on AES with faulty ciphertexts only,\u201d 2013 Workshop on Fault Diagnosis and Tolerance in Cryptography, W. Fischer and J.M. Schmidt, eds., Los Alamitos, CA, USA, pp.108-118, IEEE Computer Society, Aug. 2013. 10.1109\/fdtc.2013.18","DOI":"10.1109\/FDTC.2013.18"},{"key":"18","unstructured":"[18] A. Jana, \u201cDifferential fault attack on Ascon cipher,\u201d Cryptology ePrint Archive, Paper 2023\/1923, 2023."},{"key":"19","unstructured":"[19] Y. Gao, \u201cPartial differential fault analysis on Ascon,\u201d Cryptology ePrint Archive, Paper 2024\/343, 2024."},{"key":"20","doi-asserted-by":"crossref","unstructured":"[20] S. Nakamura, D. Miyahara, Y. Li, and K. Sakiyama, \u201cKey-recovery attack against ascon using 1-bit random fault model,\u201d 39th International Conference on Advanced Information Networking and Applications (AINA-2025), 2025. 10.1007\/978-3-031-87775-9_5","DOI":"10.1007\/978-3-031-87775-9_5"},{"key":"21","unstructured":"[21] S. Nakamura, D. Miyahara, Y. Li, and K. Sakiyama, \u201cProposal and evaluation of key-recovery attack against ascon using 2-bit random fault model,\u201d 2025 Symposium on Cryptography and Information Security (SCIS2025), pp.2E4-2, 7 pages, Jan. 2025."},{"key":"22","doi-asserted-by":"crossref","unstructured":"[22] G. Bertoni, J. Daemen, M. Peeters, and G. Van Assche, \u201cDuplexing the sponge: Single-pass authenticated encryption and other applications,\u201d Selected Areas in Cryptography, A. Miri and S. Vaudenay, eds., Berlin, Heidelberg, pp.320-337, Springer Berlin Heidelberg, 2012. 10.1007\/978-3-642-28496-0_19","DOI":"10.1007\/978-3-642-28496-0_19"},{"key":"23","unstructured":"[23] G. Bertoni, J. Daemen, M. Peeters, and G. Van Assche, \u201cThe Keccak reference,\u201d Jan. 2011."},{"key":"24","doi-asserted-by":"publisher","unstructured":"[24] Y. Sasaki, Y. Li, H. Sakamoto, and K. Sakiyama, \u201cCoupon collector\u2019s problem for fault analysis against AES\u2006\u2014\u2006High tolerance for noisy fault injections,\u201d Financial Cryptography and Data Security, A.R. Sadeghi, eds., Berlin, Heidelberg, pp.213-220, Springer Berlin Heidelberg, 2013. 10.1007\/978-3-642-39884-1_18","DOI":"10.1007\/978-3-642-39884-1_18"}],"container-title":["IEICE Transactions on Fundamentals of Electronics, Communications and Computer Sciences"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.jstage.jst.go.jp\/article\/transfun\/E109.A\/3\/E109.A_2025CIP0009\/_pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,3,7]],"date-time":"2026-03-07T04:11:00Z","timestamp":1772856660000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.jstage.jst.go.jp\/article\/transfun\/E109.A\/3\/E109.A_2025CIP0009\/_article"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,3,1]]},"references-count":24,"journal-issue":{"issue":"3","published-print":{"date-parts":[[2026]]}},"URL":"https:\/\/doi.org\/10.1587\/transfun.2025cip0009","relation":{},"ISSN":["0916-8508","1745-1337"],"issn-type":[{"value":"0916-8508","type":"print"},{"value":"1745-1337","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,3,1]]},"article-number":"2025CIP0009"}}