====== PAES ======

===== The Algorithm =====
  * Author(s): Dingfeng Ye, Peng Wang, Lei Hu, Liping Wang, Yonghong Xie, Siwei Sun, Ping Wang
  * CAESAR submission: [[http://competitions.cr.yp.to/round1/paesv1.pdf|PAES]]
  * [[https://maps.google.com/maps?q=39.910255,116.341158&num=1&t=m&z=17|Location]]

===== Status =====
Withdrawn.

===== Cryptanalysis =====
^ Type ^ Queries ^ Computations ^ Success probability ^ Reference ^
| Forgery  | $2^{11}$ | $2^{11}$ | | Sasaki and Wang[(ref:caesar:cryptoeprint2014218)] |
| Distinguisher | 1 | | | Saarinen [[https://groups.google.com/forum/#!topic/crypto-competitions/vRmJdRQBzOo|on newsgroup]] |
| Distinguisher | 1 | | $2^{-64}$ | Jean and Nikolić [(:ref:caesar:paesJeanNicolic)] |

~~REFNOTES~~