The DOI matches its Crossref record; 25 of the 25 references it cites were found in a registry or an index.
Miss in the Middle Attacks on IDEA and Khufu
Open accessOverview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
The cited source says what the claim attributes to it.
In the citing paper
“With respect to AES, probably the most powerful singlekey recovery methods designed so far are impossible differential cryptanalysis [5,33] and Square attacks [14,20].”
From Biclique Cryptanalysis of the Full AES (2011) · cites this paper as [5]
The check wasn’t confident either way, so it gives no verdict — never disputed.
In the citing paper
“The impossible differential cryptanalysis yielded the first attack on 7-round AES-128 with non-marginal data complexity.”
From Biclique Cryptanalysis of the Full AES (2011) · cites this paper as [5]
Experimental — accuracy not yet measured
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cites
Differential Cryptanalysis of the Data Encryption Standard
Biham, E., & Adi Shamir, Z. (1993) · Springer eBooks · doi:10.1007/978-1-4613-9314-6 · Cited by 1,049
Self-citationA Proposal for a New Block Encryption Standard
Lai, X., & Massey, J. L. (1991) · Lecture notes in computer science · doi:10.1007/3-540-46877-3_35 · Cited by 611
Cryptanalysis of Skipjack Reduced to 31 Rounds Using Impossible Differentials
Biham, E., Biryukov, A., & Adi Shamir, Z. (1999) · Lecture notes in computer science · doi:10.1007/3-540-48910-x_2 · Cited by 570
Self-citationMarkov Ciphers and Differential Cryptanalysis
Lai, X., Massey, J. L., & Murphy, S. P. (2007) · Springer eBooks · doi:10.1007/3-540-46416-6_2 · Cited by 560
New types of cryptanalytic attacks using related keys
Biham, E. (1994) · Journal of Cryptology · doi:10.1007/bf00203965 · Cited by 470
Self-citationNew block encryption algorithm MISTY
Matsui, M. (1997) · Lecture notes in computer science · doi:10.1007/bfb0052334 · Cited by 364
On the design and security of block ciphers
Lai, X. (1992) · Repository for Publications and Research Data (ETH Zurich) · doi:10.3929/ethz-a-000646711 · Cited by 290
Key-Schedule Cryptanalysis of IDEA, G-DES, GOST, SAFER, and Triple-DES
Kelsey, J. M., Schneier, B., & Wagner, D. A. (1996) · Lecture notes in computer science · doi:10.1007/3-540-68697-5_19 · Cited by 251
Cryptanalysis of Skipjack Reduced to 31 Rounds Using Impossible Differentials
Biham, E., Biryukov, A., & Adi Shamir, Z. (2005) · Journal of Cryptology · doi:10.1007/s00145-005-0129-3 · Cited by 205
Self-citationProvable security against a differential attack
Nyberg, K., & Knudsen, L. R. (1995) · Journal of Cryptology · doi:10.1007/bf00204800 · Cited by 197
Research works printed but not linked: 3
- C. M. Adams, S. E. Tavares, Designing S-boxes for Ciphers Resistant to Differential Cryptanalysis, Proceedings of the 3rd symposium on State and Progress of Research in Cryptography, pp. 181–190, 1993.
- S. Miyaguchi, A. Shiraishi, A. Shimizu, Fast Data Encryption Algorithm FEAL-8, Review of Electrical Communications Laboratories, Vol. 36, No. 4, pp. 433–437, 1988.
- T. Shimoyama, S. Moriai, T. Kaneko, Improving the High Order Differential Attack and Cryptanalysis of the KN Cipher, Lecture Notes in Computer Science 1396, Proceedings of the First International Workshop on Information Security (ISW’97) (Japan), pp. 32–42, Springer-Verlag 1997.
Cited by
Sorted by citations
Items 101–162 of 162
A Note on Weak Keys of PES, IDEA, and Some Extended Variants
Nakahara, J., Bart Preneel, A., & Vandewalle, J. P. L. (2003) · Lecture notes in computer science · doi:10.1007/10958513_21 · Cited by 4
New approaches to the cryptanalysis of symmetric primitives
Khovratovich, D. (2010) · Open Repository and Bibliography (University of Luxembourg) · Cited by 4
Biryukov, A. (2006) · Springer eBooks · doi:10.1007/0-387-23483-7_256 · Cited by 4
Self-citationDifferential and invertibility properties of BLAKE (full version)Preprint
Aumasson, J.-P., Guo, J., Knellwolf, S., Matusiewicz, K., & Meier, W. (2010) · IACR Cryptology ePrint Archive · Cited by 4
Quantum Miss-in-the-Middle AttackPreprint
Xie, H., & Yang, L. (2018) · arXiv (Cornell University) · doi:10.48550/arxiv.1812.08499 · Cited by 4
Impossible Differential Cryptanalysis of SPN Ciphers.Preprint
Li, R., Sun, B., & Li, C. (2010) · IACR Cryptology ePrint Archive · Cited by 4
SCAN-C: a lightweight cryptographic algorithm to secure CAN communications in modern vehicles
Hediyal, N., Divakar, B. P., & Narayanaswamy, K. (2025) · Cybersecurity · doi:10.1186/s42400-024-00291-z · Cited by 3
On Integral Distinguishers of Rijndael Family of Ciphers
Minier, M., Phan, R. C. ‐., & Pousse, B. (2012) · Cryptologia · doi:10.1080/01611194.2012.635110 · Cited by 3
Improved Impossible Differential Cryptanalysis of SMS4
Shi, T., Wang, W., & Xu, Q. (2012) · International Conference on Computational Intelligence and Security (CIS) · doi:10.1109/cis.2012.116 · Cited by 3
SAT-Based Analysis of Related-Key Impossible Distinguishers on Piccolo and (Tweakable) TWINE
Utsumi, S., Sakamoto, K., & Isobe, T. (2024) · IEICE Transactions on Fundamentals of Electronics Communications and Computer Sciences · doi:10.1587/transfun.2023eap1149 · Cited by 2
Differential and Impossible Differential Related-Key Attacks on Hierocrypt-L1
Taga, B., Moriai, S., & Aoki, K. (2014) · Lecture notes in computer science · doi:10.1007/978-3-319-08344-5_2 · Cited by 2
Weak rotational property and its application
Zhang, K., Lai, X., Guan, J., & Hu, B. (2023) · Designs Codes and Cryptography · doi:10.1007/s10623-023-01241-5 · Cited by 2
Methods of Symmetric Cryptanalysis
Khovratovich, D. (2011) · Cited by 2
Design, Implementation and Cryptanalysis of Modern Symmetric Ciphers
Henricksen, M. (2005) · Cited by 2
Analysis of cryptographic hash functions
Guo, J. (2011) · doi:10.32657/10356/43667 · Cited by 2
Impossible Differential Cryptanalysis of Lightweight Block Cipher WARPPreprint
Xu, H., Hao, C., Cui, Y., & Qi, W. (2023) · Research Square · doi:10.21203/rs.3.rs-3215560/v1 · Cited by 2
A Holistic Framework for Impossible Boomerang Attacks
Chen, Y., Fu, Q., Zhao, N., Zhao, J., Song, L., & Yang, Q. (2025) · IACR Communications in Cryptology · doi:10.62056/abhee0zn4 · Cited by 1
Optimizing key recovery in impossible cryptanalysis and its automated tool
Wang, H., & Zhang, J. (2026) · Designs Codes and Cryptography · doi:10.1007/s10623-025-01791-w · Cited by 1
Key-Dependent Nonlinear Component for Block Cipher Encryption Algorithm
Khan, W. A., & Gondal, M. A. (2014) · 3D Research · doi:10.1007/s13319-014-0033-4 · Cited by 1
Impossible differential cryptanalysis on cipher E2
Wei, Y., Yang, X., & Li, C. (2013) · Concurrency and Computation Practice and Experience · doi:10.1002/cpe.3043 · Cited by 1
Numerical Semigroups and Bounds on Impossible Differential Attacks on Generalized Feistel Schemes
Пудовкина, М. А., & Toktarev, A. (2014) · Communications in computer and information science · doi:10.1007/978-3-662-44893-9_1 · Cited by 1
Impossible Differential Cryptanalysis of the FBC Block Cipher
Lu, J., & Zhang, X. (2023) · Lecture notes in computer science · doi:10.1007/978-3-031-49187-0_19 · Cited by 1
Revisiting the shuffle of generalized Feistel structure
Chen, Y., Guo, Y., Liang, X., Song, L., & Yang, Q. (2024) · Cybersecurity · doi:10.1186/s42400-024-00220-0 · Cited by 1
Related-key Impossible Differential Cryptanalysis of Full-round HIGHT
Rostami, S., Chafjiri, S. B., & Tabatabaei, S. A. H. (2013) · International Conference on Security and Cryptography · doi:10.5220/0004528805370542 · Cited by 1
Improbable Differential Attacks on Reduced FOX64
Zhang, C., Qu, Z., & Yu, Z. (2015) · International Conference on Mechatronics, Materials, Chemistry and Computer Engineering (ICMMCCE) · doi:10.2991/icmmcce-15.2015.471 · Cited by 1
Ruzhentsev, V., & Onishchenko, Y. (2017) · Eastern-European Journal of Enterprise Technologies · doi:10.15587/1729-4061.2017.108413 · Cited by 1
Accurate Estimate of the Advantage of Impossible Differential Attacks
Blondeau, C. (2017) · IACR Transactions on Symmetric Cryptology · doi:10.46586/tosc.v2017.i3.169-191 · Cited by 1
Cryptanalytic Progress: Lessons for AES
Kelsey, J. M., Ferguson, N., Schneier, B., & Stay, M. (2000) · Cited by 1
Huang, J. (2012) · Research Online (University of Wollongong) · Cited by 1
Applications of search techniques to cryptanalysis and theconstruction of cipher components
McLaughlin, J. (2012) · White Rose eTheses Online (University of Leeds, The University of Sheffield, University of York) · Cited by 1
Impossible Differential Cryptanalysis
Boura, C., & Naya‐Plasencia, M. (2023) · Wiley eBooks · doi:10.1002/9781394256327.ch3 · Cited by 1
Impossible Differential Attack
Biryukov, A. (2025) · Springer eBooks · doi:10.1007/978-3-030-71522-9_583 · Cited by 1
Self-citationObservations on the cryptologic properties of the AES algorithm
Song, B. (2004) · Research Online (University of Wollongong)
Mukhopadhyay, S., & Sarkar, P. (2009) · Redalyc (Universidad Autónoma del Estado de México) · doi:10.13053/cys-12-3-1207
Cryptanalysis of the Full 8.5-Round REESSE3+ Block Cipher
Nakahara, J. (2015) · Lecture notes in computer science · doi:10.1007/978-3-319-22174-8_10
Cryptanalysis of TWIS Block Cipher
Koçak, O., & Öztop, N. (2012) · Lecture notes in computer science · doi:10.1007/978-3-642-34159-5_8
An improved impossible differential cryptanalysis of Zodiac
Shakiba, M., Dakhilalian, M., & Mala, H. (2009) · Journal of Systems and Software · doi:10.1016/j.jss.2009.11.714
Cryptanalysis of the full CHAIN cipher
Yap, W., Yeo, S. L., & Yian, C. H. (2011) · International Conference on Information Assurance and Security (IAS) · doi:10.1109/isias.2011.6122792
Analysis and design of symmetric cryptographic algorithms
Aumasson, J.-P. (2009) · Infoscience (Ecole Polytechnique Fédérale de Lausanne) · doi:10.5075/epfl-thesis-4506
Improved square properties of IDEA
Akgün, M., Demirci, H., Sağıroğlu, M. Ş., & Kavak, P. (2012) · TURKISH JOURNAL OF ELECTRICAL ENGINEERING & COMPUTER SCIENCES · doi:10.3906/elk-1007-564
On the estimation of the second largest eigenvalue of Markov ciphers
Xue, W., Lin, T., Shun, X., Xue, F., & Lai, X. (2016) · Security and Communication Networks · doi:10.1002/sec.1465
Down the Rabbit Hole: Revisiting the Shrinking Method.
Dubois, V. (2014)
Protecting sensitive data on a PC by a custom algorithm
Skarderud, F. (2005) · NORA - Norwegian Open Research Archives
Analysis and design of authenticated ciphers
Huang, T. (2016) · doi:10.32657/10356/65961
Analysis of iterated block ciphers
Wei, L. (2012) · doi:10.32657/10356/49503
Applications of cryptanalysis methods to some symmetric key primitives
Khajooeizadeh, A. (2015) · Spectrum Research Repository (Concordia University)
Related-Key Attacks on Reduced-Round Hierocrypt-L1
Taga, B., Moriai, S., & Aoki, K. (2016) · IEICE Transactions on Fundamentals of Electronics Communications and Computer Sciences · doi:10.1587/transfun.e100.a.126
Impossible Differential Cryptanalysis of Reduced-Round MIBS Block Cipher
Wang, G., Li, W., & Wang, S. (2011) · Energy Procedia · doi:10.1016/j.egypro.2011.11.014
Improved Impossible Differentials and Zero-Correlation Linear Hulls of New Structure III
He, J., Shen, X., & Liu, G. (2021) · Security and Communication Networks · doi:10.1155/2021/6515844
Impossible Differential Cryptanalysis on ESF Algorithm with Simplified MILP Model
Wu, X., Yan, J., Li, L., Zhang, R., Yuan, P., & Wang, Y. (2021) · KSII Transactions on Internet and Information Systems · doi:10.3837/tiis.2021.10.018
de Freitas, D. S., & Nakahara, J. (2012) · Simpósio Brasileiro de Cibersegurança (SBSeg) · doi:10.5753/sbseg.2012.20539
Cao, W. (2024) · Lecture notes in computer science · doi:10.1007/978-981-97-5028-3_13
Impossible Differential Cryptanalysis of the Raindrop Block Cipher
Lu, J., & Zhang, X. (2024) · Lecture notes in computer science · doi:10.1007/978-3-031-71073-5_10
Deep and Wide Neural Networks for Distinguisher Attacks
Tolba, Z., Dehimi, N. E. H., Derdour, M., & Kouzou, A. (2024) · Lecture notes in networks and systems · doi:10.1007/978-3-031-71426-9_15
Biryukov, A. (2025) · Springer eBooks · doi:10.1007/978-3-030-71522-9_582
Self-citationSquare attack against reduced variants of rijndael
Mang, I. (2004) · Electronic Sumy State University Institutional Repository (Sumy State University)
Differential Attack on IDEA Block Cipher Based on Its Key-Adding Function
Parshyn, O., & Khmelnytskyi, M. (2025) · Theoretical and Applied Cybersecurity · doi:10.20535/tacs.2664-29132025.3.345793
Improved integral cryptanalysis of block cipher Zodiac
Guo, Y., Shi, D., Hu, L., Guo, X., & Chen, Z. (2026) · Cybersecurity · doi:10.1186/s42400-026-00566-7
Improved quantum differential Meet-In-The-Middle attack and some applications
Wei, J., Zou, J. X., & Lin, R. (2025) · International Conference on Communication and Network Security (ICCNS) · doi:10.1145/3789456.3789469
Impossible Differential Cryptanalysis of the SPARX-128 Block Cipher
Zhang, X., & Lu, J. (2026) · Lecture notes in computer science · doi:10.1007/978-981-92-6840-5_4
Metadata
- Authors
- Biham, E., Biryukov, A., & Shamir, A.
- Affiliations
- Technion – Israel Institute of Technology (IL)
- Corresponding author
- Biham, Eli
- ORCID
- Biryukov, Alex
- Venue
- Lecture Notes in Computer Science
- Publisher
- Springer Berlin Heidelberg
- Published
- 1999
- Pages
- 124-138
- ISSN
- 0302-9743 (ISSN-L)
- OpenAlex
- W1541853791
- Cited by
- 162
- References
- 25
- Citations by year
- 2026: 3 · 2025: 5 · 2024: 9 · 2023: 6 · 2022: 1 · 2021: 3 · 2020: 4 · 2019: 5 · 2018: 4 · 2017: 4 · 2016: 5 · 2015: 7 · 2014: 6 · 2013: 9 · 2012: 13
- FWCI
- 3.10
- Type
- conference paper
- Language
- en
- Open access
- bronze
- doi.org
- Locations
- Lecture notes in computer science (publishedVersion)
- Topics
- Physical Sciences › Computer Science › Artificial Intelligence › Cryptographic Implementations and Security
- Physical Sciences › Mathematics › Discrete Mathematics and Combinatorics › Coding theory and cryptography
- Physical Sciences › Computer Science › Information Systems › Cryptography and Residue Arithmetic
- Keywords
- cryptanalysis, impossible differentials, ideas, Khufu, block cipher, skipjack tuna, reduced-round attacks, block cipher security
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
