This is an old revision of the document!
Attack Type | Nonce Respecting | Complexity | Success probability | Reference |
---|---|---|---|---|
Distinguisher | Yes | 2 queries | 1 | Bagheri, Alizadeh and Aref: (https://groups.google.com/forum/#!topic/crypto-competitions) |
Forgery & Distinguisher | Yes | 2 queries | 2-7 | Barwell (http://eprint.iacr.org/2014/251) |