• Publications
  • Influence
PRESENT: An Ultra-Lightweight Block Cipher
An ultra-lightweight block cipher, present, which is competitive with today's leading compact stream ciphers and suitable for extremely constrained environments such as RFID tags and sensor networks. Expand
Advanced Encryption Standard (AES) - An Update
The five algorithms selected to the final round of analysis for the Advanced Encryption Standard are MARS, RC6, Rijndael, Serpent, and Twofish, which also are the candidates predicted by the author in a letter to NIST. Expand
The Block Cipher Square
A new 128-bit block cipher called Square, which concentrates on the resistance against differential and linear cryptanalysis, and the publication of the resulting cipher for public scrutiny is published. Expand
Serpent: A Proposal for the Advanced Encryption Standard
A new block cipher is proposed that uses S-boxes similar to those of DES in a new structure that simultaneously allows a more rapid avalanche, a more efficient bitslice implementation, and an easy analysis that enables it to be more secure than three-key triple-DES. Expand
Truncated and Higher Order Differentials
  • L. Knudsen
  • Mathematics, Computer Science
  • FSE
  • 14 December 1994
The concept of truncated differentials is introduced and it is shown how to find a minimum nonlinear order of a block cipher using higher order differentials. Expand
PRINCE - A Low-Latency Block Cipher for Pervasive Computing Applications - Extended Abstract
This paper presents a block cipher that is optimized with respect to latency when implemented in hardware and holds that decryption for one key corresponds to encryption with a related key, which is of independent interest and proves its soundness against generic attacks. Expand
Integral Cryptanalysis
This paper considers a cryptanalytic approach called integral cryptanalysis. It can be seen as a dual to differential cryptanalysis and applies to ciphers not vulnerable to differential attacks. TheExpand
Grøstl - a SHA-3 candidate
Grostl is a SHA-3 candidate proposal, an iterated hash function with a compression function built from two fixed, large, distinct permutations, which has the effect that all known, generic attacks on the hash function are made much more difficult. Expand
PRINTcipher: A Block Cipher for IC-Printing
Two block ciphers PRINTcipher-48 and PRINTCipher-96 are presented that are designed to exploit the properties of IC-printing technology and further extend recent advances in lightweight block cipher design. Expand