Integral Cryptanalysis

By L. Knudsen, David A. Wagner. Fast Software Encryption Workshop, 2002

486 citations recorded by the source corpus.

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

RECTANGLE: a bit-slice lightweight block cipher suitable for multiple platforms (2015, background): “Integral cryptanalysis (or square attack) [18, 31] considers the propagation of sums of many values.”
GIFT: A Small Present - Towards Reaching the Limit of Lightweight Encryption (2017, background): “2 Integral Attacks We discuss the security against integral attacks [26].”
The SKINNY Family of Block Ciphers and its Low-Latency Variant MANTIS (2016, background): “Integral attack [12, 21] prepares a set of plaintexts so that particular cells can contain all the values in the set and the other cells are fixed to a constant value.”
PRESENT: An Ultra-Lightweight Block Cipher (2007, background): “Structural attacks such as integral attacks [25] and bottleneck attacks [17] are wellsuited to the analysis of AES-like ciphers [12, 13, 38].”
LBlock: A Lightweight Block Cipher (2011, background): “Since LBlock is a 4-bit word oriented cipher, we also consider that integral attack [18] may be one of the most powerful attacks against LBlock.”
KLEIN: A New Family of Lightweight Block Ciphers (2010, methodology): “HIGHT is less attractive since its area in GE is over 3000 GE, which is less competitive to the best AES implementations by Moradi et al. [40] (with 2400 GE), Hamalainen et al. [24] (with 3100 GE) and Feldhofer et al. [20] (with 3400 GE).”