Weak-key distinguishers pop out of a split-and-cancel oracle, extending integral attacks to SIMON, SPECK, PRESENT, and GIFT.

Walsh LUTs on lazy CKKS bits speed up AES transciphering, because apparently XORs deserved a detour.

Can conjugating a block cipher really cut multiplications? This paper says yes, with SKINNY getting leaner.

SDDT models skipped bitwise ops in bitslice ciphers, then uses that to key-recover PIPO with fewer faults.

Survey of Rijndael-256, the wider-block AES variant meant to dodge 128-bit birthday limits, with a cryptanalysis roundup.