References
237
92. Alex Biryukov, Adi Shamir, and David A. Wagner. Real time cryptanalysis of a5/1 on a pc.
In Fast Software Encryption, FSE 2000, New York, NY, USA, April 10–12, 2000, pages 1–18,
2001.
93. Bruno Blanchet. An Efficient Cryptographic Protocol Verifier Based on Prolog Rules. In
IEEE Computer Security Foundations Workshop, pages 82–96, Novia Scotia, Canada, 2001.
IEEE.
94. Matt Blaze. Looking on the bright side of black-box cryptography (transcript of discussion).
In Security Protocols, 8th International Workshop, Cambridge, UK, April 3–5, 2000, Revised
Papers, pages 54–61, 2000.
95. Céline Blondeau and Benoît Gérard. Differential Cryptanalysis of PUFFIN and PUFFIN2,
11 2011.
96. Bluetooth T M . Bluetooth specification, version 5.0, 2016.
97. Manuel Blum and Sampath Kannan. Designing programs that check their work. J. ACM,
42(1):269–291, 1995.
98. Martin Boesgaard, Mette Vesterager, Thomas Pedersen, Jesper Christiansen, and Ove Scavenius. Rabbit: A new high-performance stream cipher. In Thomas Johansson, editor, Fast
Software Encryption – FSE 2003, volume 2887 of Lecture Notes in Computer Science, pages
307–329, Lund, Sweden, February 24–26, 2003. Springer.
99. Andrey Bogdanov, Ilya Kizhvatov, and Andrey Pyshkin. Algebraic methods in side-channel
collision attacks and practical collision detection. In DipanwitaRoy Chowdhury, Vincent
Rijmen, and Abhijit Das, editors, Progress in Cryptology - INDOCRYPT 2008, volume 5365
of Lecture Notes in Computer Science, pages 251–265. Springer, 2008.
100. Andrey Bogdanov, Miroslav Kneževi´ c, Gregor Leander, Deniz Toz, Kerem Varici, and Ingrid
Verbauwhede. Spongent: A lightweight hash function. In Bart Preneel and Tsuyoshi Takagi,
editors, Cryptographic Hardware and Embedded Systems – CHES 2011, volume 6917 of
Lecture Notes in Computer Science, pages 312–325, Nara, Japan, September 28 – October 1,
2011. Springer.
101. Andrey Bogdanov, Lars R. Knudsen, Gregor Leander, Christof Paar, Axel Poschmann,
Matthew J. B. Robshaw, Yannick Seurin, and C. Vikkelsoe. PRESENT: An ultra-lightweight
block cipher. In Pascal Paillier and Ingrid Verbauwhede, editors, Cryptographic Hardware
and Embedded Systems – CHES 2007, volume 4727 of Lecture Notes in Computer Science,
pages 450–466, Vienna, Austria, September 10–13, 2007. Springer.
102. Andrey Bogdanov, Gregor Leander, Christof Paar, Axel Poschmann, Matthew J. B. Robshaw,
and Yannick Seurin. Hash functions and RFID tags: Mind the gap. In Elisabeth Oswald
and Pankaj Rohatgi, editors, Cryptographic Hardware and Embedded Systems – CHES 2008,
volume 5154 of Lecture Notes in Computer Science, pages 283–299, Washington, D.C., USA,
August 10–13, 2008. Springer.
103. Andrey Bogdanov, Florian Mendel, Francesco Regazzoni, Vincent Rijmen, and Elmar
Tischhauser. ALE: AES-based lightweight authenticated encryption. In Shiho Moriai, editor,
Fast Software Encryption – FSE 2013, volume 8424 of Lecture Notes in Computer Science,
pages 447–466, Singapore, March 11–13, 2014. Springer.
104. Andrey Bogdanov and Christian Rechberger. A 3-subset meet-in-the-middle attack: Cryptanalysis of the lightweight block cipher KTANTAN. In Alex Biryukov, Guang Gong, and
Douglas R. Stinson, editors, SAC 2010: 17th Annual International Workshop on Selected
Areas in Cryptography, volume 6544 of Lecture Notes in Computer Science, pages 229–240,
Waterloo, Ontario, Canada, August 12–13, 2011. Springer.
105. Julia Borghoff, Anne Canteaut, Tim Güneysu, Elif Bilge Kavun, Miroslav Kneževi´ c, Lars R.
Knudsen, Gregor Leander, Ventzislav Nikov, Christof Paar, Christian Rechberger, Peter
Rombouts, Søren S. Thomsen, and Tolga Yalçin. PRINCE - A low-latency block cipher
for pervasive computing applications - extended abstract. In Xiaoyun Wang and Kazue
Sako, editors, Advances in Cryptology – ASIACRYPT 2012, volume 7658 of Lecture Notes
in Computer Science, pages 208–225, Beijing, China, December 2–6, 2012. Springer.
106. Christina Boura, María Naya-Plasencia, and Valentin Suder. Scrutinizing and improving
impossible differential attacks: Applications to CLEFIA, Camellia, LBlock and Simon. In
237
92. Alex Biryukov, Adi Shamir, and David A. Wagner. Real time cryptanalysis of a5/1 on a pc.
In Fast Software Encryption, FSE 2000, New York, NY, USA, April 10–12, 2000, pages 1–18,
2001.
93. Bruno Blanchet. An Efficient Cryptographic Protocol Verifier Based on Prolog Rules. In
IEEE Computer Security Foundations Workshop, pages 82–96, Novia Scotia, Canada, 2001.
IEEE.
94. Matt Blaze. Looking on the bright side of black-box cryptography (transcript of discussion).
In Security Protocols, 8th International Workshop, Cambridge, UK, April 3–5, 2000, Revised
Papers, pages 54–61, 2000.
95. Céline Blondeau and Benoît Gérard. Differential Cryptanalysis of PUFFIN and PUFFIN2,
11 2011.
96. Bluetooth T M . Bluetooth specification, version 5.0, 2016.
97. Manuel Blum and Sampath Kannan. Designing programs that check their work. J. ACM,
42(1):269–291, 1995.
98. Martin Boesgaard, Mette Vesterager, Thomas Pedersen, Jesper Christiansen, and Ove Scavenius. Rabbit: A new high-performance stream cipher. In Thomas Johansson, editor, Fast
Software Encryption – FSE 2003, volume 2887 of Lecture Notes in Computer Science, pages
307–329, Lund, Sweden, February 24–26, 2003. Springer.
99. Andrey Bogdanov, Ilya Kizhvatov, and Andrey Pyshkin. Algebraic methods in side-channel
collision attacks and practical collision detection. In DipanwitaRoy Chowdhury, Vincent
Rijmen, and Abhijit Das, editors, Progress in Cryptology - INDOCRYPT 2008, volume 5365
of Lecture Notes in Computer Science, pages 251–265. Springer, 2008.
100. Andrey Bogdanov, Miroslav Kneževi´ c, Gregor Leander, Deniz Toz, Kerem Varici, and Ingrid
Verbauwhede. Spongent: A lightweight hash function. In Bart Preneel and Tsuyoshi Takagi,
editors, Cryptographic Hardware and Embedded Systems – CHES 2011, volume 6917 of
Lecture Notes in Computer Science, pages 312–325, Nara, Japan, September 28 – October 1,
2011. Springer.
101. Andrey Bogdanov, Lars R. Knudsen, Gregor Leander, Christof Paar, Axel Poschmann,
Matthew J. B. Robshaw, Yannick Seurin, and C. Vikkelsoe. PRESENT: An ultra-lightweight
block cipher. In Pascal Paillier and Ingrid Verbauwhede, editors, Cryptographic Hardware
and Embedded Systems – CHES 2007, volume 4727 of Lecture Notes in Computer Science,
pages 450–466, Vienna, Austria, September 10–13, 2007. Springer.
102. Andrey Bogdanov, Gregor Leander, Christof Paar, Axel Poschmann, Matthew J. B. Robshaw,
and Yannick Seurin. Hash functions and RFID tags: Mind the gap. In Elisabeth Oswald
and Pankaj Rohatgi, editors, Cryptographic Hardware and Embedded Systems – CHES 2008,
volume 5154 of Lecture Notes in Computer Science, pages 283–299, Washington, D.C., USA,
August 10–13, 2008. Springer.
103. Andrey Bogdanov, Florian Mendel, Francesco Regazzoni, Vincent Rijmen, and Elmar
Tischhauser. ALE: AES-based lightweight authenticated encryption. In Shiho Moriai, editor,
Fast Software Encryption – FSE 2013, volume 8424 of Lecture Notes in Computer Science,
pages 447–466, Singapore, March 11–13, 2014. Springer.
104. Andrey Bogdanov and Christian Rechberger. A 3-subset meet-in-the-middle attack: Cryptanalysis of the lightweight block cipher KTANTAN. In Alex Biryukov, Guang Gong, and
Douglas R. Stinson, editors, SAC 2010: 17th Annual International Workshop on Selected
Areas in Cryptography, volume 6544 of Lecture Notes in Computer Science, pages 229–240,
Waterloo, Ontario, Canada, August 12–13, 2011. Springer.
105. Julia Borghoff, Anne Canteaut, Tim Güneysu, Elif Bilge Kavun, Miroslav Kneževi´ c, Lars R.
Knudsen, Gregor Leander, Ventzislav Nikov, Christof Paar, Christian Rechberger, Peter
Rombouts, Søren S. Thomsen, and Tolga Yalçin. PRINCE - A low-latency block cipher
for pervasive computing applications - extended abstract. In Xiaoyun Wang and Kazue
Sako, editors, Advances in Cryptology – ASIACRYPT 2012, volume 7658 of Lecture Notes
in Computer Science, pages 208–225, Beijing, China, December 2–6, 2012. Springer.
106. Christina Boura, María Naya-Plasencia, and Valentin Suder. Scrutinizing and improving
impossible differential attacks: Applications to CLEFIA, Camellia, LBlock and Simon. In