… Differential [5] and linear [6] cryptanalysis was shown to be one of the most … to differential
and linear cryptanalysis became one of the basic criteria in the evaluation of the block ciphers, …

… This paper has described a new attack technique called differential entropy, combining
differential cryptanalysis with Shannon entropy. Our target was the IDEA block cipher, due to the …

… differential attacks on block ciphers. We suggest a general framework, which enhances
current differential cryptanalytic … it to evaluate the security of GOST block cipher [63, 102, 107]. …

… Actually, the well-known differential cryptanalysis and linear cryptanalysis may be thought
of as attacks relying on the existence of a discriminator. Leaving out the inner workings of the …

… In Section 4, we analyze IC-BSIF by using differential cryptanalysis and construct a linear
relation between plain-images and cipher-images. In Section 5, based on the linear relation, …

… In [65] Kaliski and Robshaw presented a technique which aids linear cryptanalysis of block
ciphers and achieves a reduction of data required for successful attack. The basic idea is to …

… We demonstrate this technique on the lightweight block ciphers SPECK32, SIMON32,
and … block ciphers SIMON32, SPECK32 and GIFT64. We discuss the classical differential …

… block cipher cryptanalysis techniques into a particular type of side-channel attack, the differential
… intrinsic weaknesses of block cipher components, eg differential cryptanalysis (DC) [7], …

… Our attack then follows the general principle of statistical attacks on block ciphers: the first
part is a distillation phase which counts how many times the partial keys are suggested by the …

… operations required for a given security level against differential and linear cryptanalysis,
we demonstrate that Feistel networks with contracting optimal diffusion are comparable to …