… Before studying the correlation of linear hulls over block ciphers… are often encountered as
parts of block ciphers, namely the XOR-… for block ciphers based on zero-correlation linear hulls. …

… Further we can extend the linear attack to 26-round with … computed linear hulls in practice
for the original PRESENT cipher… ) of conventional linear relations based on a single linear trail. …

… We focus on the main application of block ciphers, namely … block ciphers are linear
cryptanalysis and differential cryptanalysis. Linear cryptanalysis makes use of so-called linear hulls ie…

… linear approximations of an iterated block cipher in the presence of several strong linear …
While the effect of such trails in Matsui’s Algorithm 2, also called the linear hull effect, has been …

… of linear cryptanalysis and provides novel insights in the areas of key schedule design and
tweakable block ciphers. We examine in a step by step manner the linear hull theorem in a …

… New method for upper bounding the maximum average linear hull probability for SPNs [Text…
Improving the upper bound on the maximum average linear hull probability for Rijndael [Text…

… In the sequel we will show how concatenating short linear hulls forms a sort of linear trail
which we call a linear super-trail. We will first show how this can be used to improve the bias …

… attacks based on a single linear trail. We present methods on how one can, in many … the
block cipher PUFFIN (see Section 4). We present an attack on full round PUFFIN, a block cipher …

… we investigate the linear hull effect in the light-weight block cipher EPCBC. We give an
efficient method of computing linear hulls with high capacity. We then apply found hulls to derive …

… Block ciphers are among the most important primitives in constructing … linear hulls is based
on the miss-in-the-middle technique, ie, we start from the beginning and the end of the cipher, …