====== PANDA ======

{{http://upload.wikimedia.org/wikipedia/commons/0/0f/Grosser_Panda.JPG?200}}
===== The Algorithm =====
  * Author(s): Dingfeng Ye, Peng Wang, Lei Hu, Liping Wang, Yonghong Xie, Siwei Sun, Ping Wang
  * CAESAR submission: [[http://competitions.cr.yp.to/round1/pandav1.pdf|PANDA]]
  * [[https://maps.google.com/maps?q=39.910255,116.341158&num=1&t=m&z=17|Location]]

===== Status =====
Withdrawn.

===== Cryptanalysis =====
^ Type ^ Queries ^ Data ^ Computations ^ Memory ^ Reference ^ Comment ^
| Forgery | 2 | | $2^{64}$ | | Sasaki and Wang [(:ref:caesar:cryptoeprint2014217)] | PANDA-s |
| State recovery | | $134$ KP | $2^{41}$ | 2 GB | Feng, Zhang and Wang [(:ref:caesar:cryptoeprint2014325)] | PANDA-s |
| Forgery | | $134$ KP | $2^{41}$ | 2 GB | Feng, Zhang and Wang [(:ref:caesar:cryptoeprint2014325)] | PANDA-s |
~~REFNOTES~~