====== π-Cipher ======

===== The Algorithm =====
  * Author(s): Danilo Gligoroski, Hristina Mihajloska, Simona Samardjiska, Håkon Jacobsen, Mohamed El-Hadedy, Rune Erlend Jensen
  * CAESAR submission: [[http://competitions.cr.yp.to/round1/picipherv1.pdf|π-Cipher]]
  * Proposed fix to padding rule: [[https://groups.google.com/forum/#!topic/crypto-competitions/4PCvlcbDx7s|π-Cipher v2]]
  * [[https://maps.google.com/maps?q=63.415346,10.408341&num=1&t=m&z=16|Location]]

===== Cryptanalysis =====

^ Type ^ Data ^ Memory ^ Time ^ Reference ^
| Tag second-preimage attack, $\omega = 16$ | $2^{11}$ | $2^{11}$ | $2^{22}$ | Leurent [(:ref:caesar:piCipherLeurent)] |
| Tag second-preimage attack, $\omega = 32$ | $2^{16}$ | $2^{15}$ | $2^{31}$ | Leurent [(:ref:caesar:piCipherLeurent)] |
| Tag second-preimage attack, $\omega = 64$ | $2^{22}$ | $2^{23}$ | $2^{45}$ | Leurent [(:ref:caesar:piCipherLeurent)] |
| Forgery due to padding weakness | | | | Fuhr and Leurent on [[https://groups.google.com/forum/#!topic/crypto-competitions/5pLxzTpfc8Q|Cryptographic Competitions]] |
~~REFNOTES~~