This shows you the differences between two versions of the page.
Both sides previous revision Previous revision | |||
ascon [29/04/2014 09:28:21] stek [The Algorithm] |
ascon [14/01/2015 20:33:38] (current) meichlseder Ascon analysis results |
||
---|---|---|---|
Line 8: | Line 8: | ||
===== Cryptanalysis ===== | ===== Cryptanalysis ===== | ||
+ | ^ Type ^ Rounds ^ Nonce ^ Complexity ^ Reference ^ | ||
+ | | Key recovery | 5/12 Initialization | Respecting | $2^{35}$ | Dobraunig, Eichlseder, Mendel, and Schläffer [(:ref:caesar:asconIaik)] | | ||
+ | | Key recovery | 6/12 Initialization | Respecting | $2^{66}$ | Ibid. [(:ref:caesar:asconIaik)] | | ||
+ | | Forgery | 3/12 Finalization | Respecting | $2^{33}$ | Ibid. [(:ref:caesar:asconIaik)] | | ||
+ | | Forgery | 4/12 Finalization | Respecting | $2^{101}$ | Ibid. [(:ref:caesar:asconIaik)] | | ||
+ | | Permutation distinguisher | 12/12 Permutation | | $2^{130}$ | Ibid. [(:ref:caesar:asconIaik)] | | ||
- | + | ~~REFNOTES~~ |