(Quantum) Collision Attacks on Reduced Simpira v2

Author(s):  
Boyu Ni ◽  
Xiaoyang Dong ◽  
Keting Jia ◽  
Qidi You

Simpira v2 is an AES-based permutation proposed by Gueron and Mouha at ASIACRYPT 2016. In this paper, we build an improved MILP model to count the differential and linear active Sboxes for Simpira v2, which achieves tighter bounds of the minimum number of active Sboxes for a few versions of Simpira v2. Then, based on the new model, we find some new truncated differentials for Simpira v2 and give a series (quantum) collision attacks on two versions of reduced Simpira v2.

2018 ◽  
Vol 29 (04) ◽  
pp. 481-504 ◽  
Author(s):  
Harout Aydinian ◽  
Ferdinando Cicalese ◽  
Christian Deppe ◽  
Vladimir Lebedev

We study a new model of combinatorial group testing: the item to be found (a.k.a. the target) occupies an unknown node in a graph. At each time instant, we can test (or query) a subset of the nodes and learn whether the target occupies any of such nodes. Immediately after the result of the test is available, the target can move to any node adjacent to its present location. The search finishes when we are able to locate the object with some predefined accuracy [Formula: see text] (a parameter fixed beforehand), i.e., to indicate a set of [Formula: see text] nodes that includes the location of the object. In this paper we study two types of problems related to the above model: (i) what is the minimum value of the accuracy parameter for which a search strategy in the above sense exists; (ii) given the accuracy, what is the minimum number of tests that allow to locate the target. We study these questions on paths, cycles, and trees as underlying graphs and provide tight answers for the above questions. We also consider a restricted variant of the problem, where the number of moves of the target is bounded.


2020 ◽  
Vol 2020 ◽  
pp. 1-9
Author(s):  
Shaoqiang Liu ◽  
Chaiyang Peng ◽  
Chunjiang Li

SKINNY is a tweakable lightweight block cipher algorithm. In order to test its security, this paper performs optimal differential trail search analysis on all SKINNY-64 versions under single-key setting based on the MILP (Mixed Integer Linear Programming) algorithm. Firstly, SKINNY round function is abstracted equivalently by precise constraints, and the objective function is set as the minimum number of active S-box number to optimize SKINNY-64 MILP model. Experiments show the differential trail searched by this method is not necessarily optimal. In order to directly search for the optimal differential trail, the S-box differential probability coding information is added to the optimized SKINNY-64 MILP model, the S-box differential characteristic is reconstructed, and the objective function is set to the minimum value of the probability coding information, which improves the SKINNY-64 MILP model. The results of experimental show that the improved MILP model can directly search for the optimal differential trail, and the complexity is slightly increased, but the search efficiency is significantly improved. Under single-key setting, this method has obvious advantage in searching the optimal differential trails of SKINNY-64 with low round number.


Author(s):  
H. Akabori ◽  
K. Nishiwaki ◽  
K. Yoneta

By improving the predecessor Model HS- 7 electron microscope for the purpose of easier operation, we have recently completed new Model HS-8 electron microscope featuring higher performance and ease of operation.


Author(s):  
D. C. Joy ◽  
R. D. Bunn

The information available from an SEM image is limited both by the inherent signal to noise ratio that characterizes the image and as a result of the transformations that it may undergo as it is passed through the amplifying circuits of the instrument. In applications such as Critical Dimension Metrology it is necessary to be able to quantify these limitations in order to be able to assess the likely precision of any measurement made with the microscope.The information capacity of an SEM signal, defined as the minimum number of bits needed to encode the output signal, depends on the signal to noise ratio of the image - which in turn depends on the probe size and source brightness and acquisition time per pixel - and on the efficiency of the specimen in producing the signal that is being observed. A detailed analysis of the secondary electron case shows that the information capacity C (bits/pixel) of the SEM signal channel could be written as :


2020 ◽  
Vol 63 (6) ◽  
pp. 1947-1957
Author(s):  
Alexandra Hollo ◽  
Johanna L. Staubitz ◽  
Jason C. Chow

Purpose Although sampling teachers' child-directed speech in school settings is needed to understand the influence of linguistic input on child outcomes, empirical guidance for measurement procedures needed to obtain representative samples is lacking. To optimize resources needed to transcribe, code, and analyze classroom samples, this exploratory study assessed the minimum number and duration of samples needed for a reliable analysis of conventional and researcher-developed measures of teacher talk in elementary classrooms. Method This study applied fully crossed, Person (teacher) × Session (samples obtained on 3 separate occasions) generalizability studies to analyze an extant data set of three 10-min language samples provided by 28 general and special education teachers recorded during large-group instruction across the school year. Subsequently, a series of decision studies estimated of the number and duration of sessions needed to obtain the criterion g coefficient ( g > .70). Results The most stable variables were total number of words and mazes, requiring only a single 10-min sample, two 6-min samples, or three 3-min samples to reach criterion. No measured variables related to content or complexity were adequately stable regardless of number and duration of samples. Conclusions Generalizability studies confirmed that a large proportion of variance was attributable to individuals rather than the sampling occasion when analyzing the amount and fluency of spontaneous teacher talk. In general, conventionally reported outcomes were more stable than researcher-developed codes, which suggests some categories of teacher talk are more context dependent than others and thus require more intensive data collection to measure reliably.


2005 ◽  
Vol 173 (4S) ◽  
pp. 140-141
Author(s):  
Mariana Lima ◽  
Celso D. Ramos ◽  
Sérgio Q. Brunetto ◽  
Marcelo Lopes de Lima ◽  
Carla R.M. Sansana ◽  
...  

Author(s):  
Thorsten Meiser

Stochastic dependence among cognitive processes can be modeled in different ways, and the family of multinomial processing tree models provides a flexible framework for analyzing stochastic dependence among discrete cognitive states. This article presents a multinomial model of multidimensional source recognition that specifies stochastic dependence by a parameter for the joint retrieval of multiple source attributes together with parameters for stochastically independent retrieval. The new model is equivalent to a previous multinomial model of multidimensional source memory for a subset of the parameter space. An empirical application illustrates the advantages of the new multinomial model of joint source recognition. The new model allows for a direct comparison of joint source retrieval across conditions, it avoids statistical problems due to inflated confidence intervals and does not imply a conceptual imbalance between source dimensions. Model selection criteria that take model complexity into account corroborate the new model of joint source recognition.


1986 ◽  
Vol 31 (2) ◽  
pp. 108-109
Author(s):  
Alexandra G. Kaplan
Keyword(s):  

PsycCRITIQUES ◽  
2004 ◽  
Vol 49 (Supplement 13) ◽  
Author(s):  
Paul E. Priester
Keyword(s):  

Sign in / Sign up

Export Citation Format

Share Document