Weak-key distinguishers pop out of a split-and-cancel oracle, extending integral attacks to SIMON, SPECK, PRESENT, and GIFT.
trending2
01 02 Concrete Bit-Operation Cost of XL: For Solving Multivariate Quadratic Systems Using Wiedemann and Berlekamp-Massey eprint.iacr.orgA bit-operation cost model for XL plus Wiedemann/Berlekamp-Massey, with formulas and experiments for MQ challenge and NIST candidates.