Neural-discovered differential-linear masks find short-round hits, but they miss the best long-round distinguishers in ARX ciphers.

64 to 1536 bits of ARX permutation family, now with hashes, XOFs, AEAD, and ciphers, because one primitive was not enough.

MILP-assisted differential-linear attacks on Forr'o, with 6.75-round key recovery, because hand analysis was too quaint.

Paper on ARX S-box bounds and AFS, a new Feistel family; apparently even S-boxes now need a hybrid MILP/SMT babysitter.