… In this paper we extend the study regarding one-round linear hulls introduced in [7]. In the
first … In this section we prove the existence of one-round hulls in DES, which might impact the …

… In this paper we deploy ElimLin algorithm proposed by Courtois against DES [9… round
linear hull to a 17-round linear hull with 93 17-round linear trails by choosing an additional 1-round …

… cryptanalysis is introduced by Matsui and applied to DES in [11]. The formalism of … We
prove the existence of one-round hulls, which impact the computation of correlations of multi-…

… label “poisonous round” for a one-round linear hull that leads, … A trail containing at least one
“poisonous” round is called a “… round, we used a 1-round linear hull for the ffunction of DES. …

… key-recovery attacks based on Algorithm 1 and two of those zero-correlation linear hulls. …
In our attack, the 9-round zero-correlation linear hull covers rounds 3 to 11. The procedure …

… method proposed in 1993 to cryptanalysis DES. At first, … 13-round linear hull distinguisher,
we give the 21-round linear attack on Simon32 / 64. The estimated potential of the linear hull is …

… -round linear hull with potential greater than 2−61.793 of CHAM with 64-bit blocks and a
54-round linear hull … To the best of our knowledge, they are the first known linear hulls of CHAM. …

… In this paper, we investigate linear characteristics with consideration of dependence of the
S-boxes of the bitwise AND operation with dependent input bits. By the methods of automatic …

… ” is true for the case of DES [17]. The reason lies again in the structure of the key schedule
of DES: it is not only linear, but actually subkey bits of the round keys are always some master …

… ignoring the dependence of the S-box based on the Mixed-integer linear programming(…
round linear hulls on KATAN32/48/64 respectively are proposed. Moreover, 131/120/94-round …