{"as_of":"2026-08-24T03:18:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:b9d1be641976205f26f901a44bdc60084dfe749cba2fae206e7be0710e95999b","coverage":[{"denominator":31,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":31,"source":"paper_references, paper_reference_links","source_observed_at":"2026-06-29T17:04:39.234160Z","state":"measured"},{"denominator":31,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":31,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-23T06:30:58.430688+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2605.27535/citation-record","integrity":"/paper/2605.27535/integrity","json":"/paper/2605.27535/citation-record.json","paper":"/paper/2605.27535"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1007/978-3-662-04722-4","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Daemen and V","venue":null,"work_id":"d6efb4c8-484a-41dd-becc-604c2ee260f9","year":2002},"citing_paper":{"arxiv_id":"2605.27535","last_updated":"2026-05-26T18:07:27Z","snapshot_observed_at":"2026-08-17T17:24:44.148552Z","submitted_at":"2026-05-26T18:07:27Z","title":"Analyzing Linear Layers in Related-Differential Cryptanalysis","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-06-29T17:04:39.234160Z"},"links":{"citing_paper":"/paper/2605.27535"},"observation_digest":"sha256:4422a393a6bc57d1e78c533166ff8e66ba10c5f01e1acf3adc3f0ce24898d04d","observation_id":"d41db9ff-ab76-4669-970c-ba1d4d4a43b8","resolution":{"observed_at":"2026-06-29T17:13:44.418221Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T17:04:39.234160Z","title":"Daemen,Cipher and hash function design, strategies based on linear and differential cryptanalysis, PhD Thesis","venue":null,"work_id":null,"year":1995},"citing_paper":{"arxiv_id":"2605.27535","last_updated":"2026-05-26T18:07:27Z","snapshot_observed_at":"2026-08-17T17:24:44.148552Z","submitted_at":"2026-05-26T18:07:27Z","title":"Analyzing Linear Layers in Related-Differential Cryptanalysis","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-06-29T17:04:39.234160Z"},"links":{"citing_paper":"/paper/2605.27535"},"observation_digest":"sha256:a1775d220d1f38c93b0d15ac6093e7add8755e9c83593545a4c64e385cd91c80","observation_id":"6211736f-c191-420c-a3e2-6850427b8019","resolution":{"observed_at":"2026-06-29T17:04:39.234160Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T17:04:39.234160Z","title":"The cipher SHARK,","venue":null,"work_id":null,"year":1996},"citing_paper":{"arxiv_id":"2605.27535","last_updated":"2026-05-26T18:07:27Z","snapshot_observed_at":"2026-08-17T17:24:44.148552Z","submitted_at":"2026-05-26T18:07:27Z","title":"Analyzing Linear Layers in Related-Differential Cryptanalysis","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-06-29T17:04:39.234160Z"},"links":{"citing_paper":"/paper/2605.27535"},"observation_digest":"sha256:9561e5030b46a8428824be861398d6558783beba0b92034a59bd43113fe7a339","observation_id":"74a70247-967a-46c6-a55f-0a5d849fe853","resolution":{"observed_at":"2026-06-29T17:04:39.234160Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T17:04:39.234160Z","title":"The block cipher Square,","venue":null,"work_id":null,"year":1997},"citing_paper":{"arxiv_id":"2605.27535","last_updated":"2026-05-26T18:07:27Z","snapshot_observed_at":"2026-08-17T17:24:44.148552Z","submitted_at":"2026-05-26T18:07:27Z","title":"Analyzing Linear Layers in Related-Differential Cryptanalysis","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-06-29T17:04:39.234160Z"},"links":{"citing_paper":"/paper/2605.27535"},"observation_digest":"sha256:1ad560fed7b55b1008d01ab004c1e0d2d079ec132ee21465d0bd0f1690759bed","observation_id":"49b535e2-bb86-41d1-b503-fedfa09636c6","resolution":{"observed_at":"2026-06-29T17:04:39.234160Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T17:04:39.234160Z","title":"A Construction of Matrices with No Singular Square Submatrices,","venue":null,"work_id":null,"year":2004},"citing_paper":{"arxiv_id":"2605.27535","last_updated":"2026-05-26T18:07:27Z","snapshot_observed_at":"2026-08-17T17:24:44.148552Z","submitted_at":"2026-05-26T18:07:27Z","title":"Analyzing Linear Layers in Related-Differential Cryptanalysis","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-06-29T17:04:39.234160Z"},"links":{"citing_paper":"/paper/2605.27535"},"observation_digest":"sha256:6a76f3f8f6b0f5bec3de55536940bc1b16f968fc60844e4fe1791aba630a0291","observation_id":"faec1e7f-e7bb-49ec-887b-9a0fb4405a91","resolution":{"observed_at":"2026-06-29T17:04:39.234160Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T17:04:39.234160Z","title":"On constructions of involutory MDS matrices,","venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"2605.27535","last_updated":"2026-05-26T18:07:27Z","snapshot_observed_at":"2026-08-17T17:24:44.148552Z","submitted_at":"2026-05-26T18:07:27Z","title":"Analyzing Linear Layers in Related-Differential Cryptanalysis","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-06-29T17:04:39.234160Z"},"links":{"citing_paper":"/paper/2605.27535"},"observation_digest":"sha256:599cfcf161851eb19085439d7426657cb34d79518f4a8a4d5900b9873d5d4322","observation_id":"065bda4e-a3ff-45ab-9703-1887d9acb81e","resolution":{"observed_at":"2026-06-29T17:04:39.234160Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T17:04:39.234160Z","title":"Cryptographically significant MDS matrices over finite fields: A brief survey and some generalized results,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2605.27535","last_updated":"2026-05-26T18:07:27Z","snapshot_observed_at":"2026-08-17T17:24:44.148552Z","submitted_at":"2026-05-26T18:07:27Z","title":"Analyzing Linear Layers in Related-Differential Cryptanalysis","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-06-29T17:04:39.234160Z"},"links":{"citing_paper":"/paper/2605.27535"},"observation_digest":"sha256:3041b6f929b878bd63a5eca7018edbbfb0f6d473a299003c258b7307ad4c0a84","observation_id":"34250ed8-a8f9-418a-b799-2282ed6526f1","resolution":{"observed_at":"2026-06-29T17:04:39.234160Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T17:04:39.234160Z","title":"On the Direct Construction of MDS and Near-MDS Matrices,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2605.27535","last_updated":"2026-05-26T18:07:27Z","snapshot_observed_at":"2026-08-17T17:24:44.148552Z","submitted_at":"2026-05-26T18:07:27Z","title":"Analyzing Linear Layers in Related-Differential Cryptanalysis","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-06-29T17:04:39.234160Z"},"links":{"citing_paper":"/paper/2605.27535"},"observation_digest":"sha256:5004ffadc5f71aca82318e2f611f6e53b3065de10f18e8b2b4ba060d570c06f6","observation_id":"5197a098-1b9b-449d-9379-f176594911e7","resolution":{"observed_at":"2026-06-29T17:04:39.234160Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T17:04:39.234160Z","title":"On construction of Involutory MDS Matrices from Vandermonde Matrices in GF(2 q),","venue":null,"work_id":null,"year":2012},"citing_paper":{"arxiv_id":"2605.27535","last_updated":"2026-05-26T18:07:27Z","snapshot_observed_at":"2026-08-17T17:24:44.148552Z","submitted_at":"2026-05-26T18:07:27Z","title":"Analyzing Linear Layers in Related-Differential Cryptanalysis","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-06-29T17:04:39.234160Z"},"links":{"citing_paper":"/paper/2605.27535"},"observation_digest":"sha256:f93dddc8809849a587f16ce86ab531b5f048475c5862574a2e69ee8e9516517e","observation_id":"a0d54722-8604-4a65-90d2-afa13f3381c0","resolution":{"observed_at":"2026-06-29T17:04:39.234160Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T17:04:39.234160Z","title":"Direct Construction of Recursive MDS Diffusion Layers Using Shortened BCH Codes,","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2605.27535","last_updated":"2026-05-26T18:07:27Z","snapshot_observed_at":"2026-08-17T17:24:44.148552Z","submitted_at":"2026-05-26T18:07:27Z","title":"Analyzing Linear Layers in Related-Differential Cryptanalysis","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-06-29T17:04:39.234160Z"},"links":{"citing_paper":"/paper/2605.27535"},"observation_digest":"sha256:9ad0b4a444fb2d395d7e59fc3afeb24dad2b0afc531b4e250878db34a5e8511b","observation_id":"9d964fd9-075e-45f3-8201-84dcb2e36369","resolution":{"observed_at":"2026-06-29T17:04:39.234160Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T17:04:39.234160Z","title":"Towards a general construction of recursive MDS diffusion layers,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2605.27535","last_updated":"2026-05-26T18:07:27Z","snapshot_observed_at":"2026-08-17T17:24:44.148552Z","submitted_at":"2026-05-26T18:07:27Z","title":"Analyzing Linear Layers in Related-Differential Cryptanalysis","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-06-29T17:04:39.234160Z"},"links":{"citing_paper":"/paper/2605.27535"},"observation_digest":"sha256:9cee611600670645909a687132ea8fc38e6dc732a138a7b743eda04ee7fcd89b","observation_id":"b813a57f-90ae-40f6-8b59-8af4d40da99c","resolution":{"observed_at":"2026-06-29T17:04:39.234160Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T17:04:39.234160Z","title":"On the direct construction of recursive MDS matrices,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2605.27535","last_updated":"2026-05-26T18:07:27Z","snapshot_observed_at":"2026-08-17T17:24:44.148552Z","submitted_at":"2026-05-26T18:07:27Z","title":"Analyzing Linear Layers in Related-Differential Cryptanalysis","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-06-29T17:04:39.234160Z"},"links":{"citing_paper":"/paper/2605.27535"},"observation_digest":"sha256:924dc7eb12ad53f0c53b23211f9d8a980ff24b7a193d80e57a5b8226045a7c76","observation_id":"7ca082af-da80-404a-bcb1-1ab065dc98c8","resolution":{"observed_at":"2026-06-29T17:04:39.234160Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T17:04:39.234160Z","title":"Exhaustive Search for Various Types of MDS Matrices,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2605.27535","last_updated":"2026-05-26T18:07:27Z","snapshot_observed_at":"2026-08-17T17:24:44.148552Z","submitted_at":"2026-05-26T18:07:27Z","title":"Analyzing Linear Layers in Related-Differential Cryptanalysis","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-06-29T17:04:39.234160Z"},"links":{"citing_paper":"/paper/2605.27535"},"observation_digest":"sha256:269d651a0374f5d84b00a2cadc7b2956ce05d5edb8ce69fc7429625a83b03033","observation_id":"57f2645c-1d9f-4bf2-aaf4-d895241f0298","resolution":{"observed_at":"2026-06-29T17:04:39.234160Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T17:04:39.234160Z","title":"Lightweight MDS Involution Matrices,","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2605.27535","last_updated":"2026-05-26T18:07:27Z","snapshot_observed_at":"2026-08-17T17:24:44.148552Z","submitted_at":"2026-05-26T18:07:27Z","title":"Analyzing Linear Layers in Related-Differential Cryptanalysis","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-06-29T17:04:39.234160Z"},"links":{"citing_paper":"/paper/2605.27535"},"observation_digest":"sha256:a9209dc8c8fe2f796324c8c43026f151aab5c330db2eadcf3ccc7e364648a561","observation_id":"1682be38-368b-4ba6-be7c-8a25cebe21a1","resolution":{"observed_at":"2026-06-29T17:04:39.234160Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T17:04:39.234160Z","title":"Lightweight MDS Generalized Circulant Matrices,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2605.27535","last_updated":"2026-05-26T18:07:27Z","snapshot_observed_at":"2026-08-17T17:24:44.148552Z","submitted_at":"2026-05-26T18:07:27Z","title":"Analyzing Linear Layers in Related-Differential Cryptanalysis","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-06-29T17:04:39.234160Z"},"links":{"citing_paper":"/paper/2605.27535"},"observation_digest":"sha256:4e6e19f249948f6b11cf9a381d4217c9d24c5f0d13db02406695112cb697d461","observation_id":"d2f2621d-dcc9-46b4-a5d5-2fd98f24eceb","resolution":{"observed_at":"2026-06-29T17:04:39.234160Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T17:04:39.234160Z","title":"On the construction of lightweight circulant involutory mds matrices,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2605.27535","last_updated":"2026-05-26T18:07:27Z","snapshot_observed_at":"2026-08-17T17:24:44.148552Z","submitted_at":"2026-05-26T18:07:27Z","title":"Analyzing Linear Layers in Related-Differential Cryptanalysis","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-06-29T17:04:39.234160Z"},"links":{"citing_paper":"/paper/2605.27535"},"observation_digest":"sha256:30f6312a5d2b9b27608818c13c2d5d22a2d4d05bdcfc1322beb3a1c7039ebc95","observation_id":"5dc84499-aa11-4b7c-a868-39b561776900","resolution":{"observed_at":"2026-06-29T17:04:39.234160Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T17:04:39.234160Z","title":"A new matrix form to generate all3×3involutory MDS matrices overF 2m ,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2605.27535","last_updated":"2026-05-26T18:07:27Z","snapshot_observed_at":"2026-08-17T17:24:44.148552Z","submitted_at":"2026-05-26T18:07:27Z","title":"Analyzing Linear Layers in Related-Differential Cryptanalysis","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-06-29T17:04:39.234160Z"},"links":{"citing_paper":"/paper/2605.27535"},"observation_digest":"sha256:d2a300d1d0ca8b3a1f715598f712c6b32db7f6b064911e7c7ecb5e5f8fcfafab","observation_id":"9a3b3a06-87ef-430b-b444-01ed119ba384","resolution":{"observed_at":"2026-06-29T17:04:39.234160Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T17:04:39.234160Z","title":"Generalisation of Hadamard matrix to generate involutory MDS matrices for lightweight cryptography,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2605.27535","last_updated":"2026-05-26T18:07:27Z","snapshot_observed_at":"2026-08-17T17:24:44.148552Z","submitted_at":"2026-05-26T18:07:27Z","title":"Analyzing Linear Layers in Related-Differential Cryptanalysis","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-06-29T17:04:39.234160Z"},"links":{"citing_paper":"/paper/2605.27535"},"observation_digest":"sha256:4dbfba4f485236aa9abec71b759068de916be17cbfe9a0bc5f3c0eeba517dfa8","observation_id":"035a40b7-ac1b-4c38-bb7c-28b3ea6835e4","resolution":{"observed_at":"2026-06-29T17:04:39.234160Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T17:04:39.234160Z","title":"Construction of all MDS and involutory MDS matrices,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2605.27535","last_updated":"2026-05-26T18:07:27Z","snapshot_observed_at":"2026-08-17T17:24:44.148552Z","submitted_at":"2026-05-26T18:07:27Z","title":"Analyzing Linear Layers in Related-Differential Cryptanalysis","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-06-29T17:04:39.234160Z"},"links":{"citing_paper":"/paper/2605.27535"},"observation_digest":"sha256:b5cf2ad792b4c52c206aad61538808356848687dac726f2cf4372a55ecbf03b9","observation_id":"ba6e4a8f-f8f3-4c88-9d69-9469f8580619","resolution":{"observed_at":"2026-06-29T17:04:39.234160Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1007/s12190-024-02142-z","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"A systematic construction approach for all4×4involutory MDS matrices,","venue":"Journal of Applied Mathematics and Computing","work_id":"aea39d42-5b89-413b-b045-a280afc452d4","year":2024},"citing_paper":{"arxiv_id":"2605.27535","last_updated":"2026-05-26T18:07:27Z","snapshot_observed_at":"2026-08-17T17:24:44.148552Z","submitted_at":"2026-05-26T18:07:27Z","title":"Analyzing Linear Layers in Related-Differential Cryptanalysis","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-06-29T17:04:39.234160Z"},"links":{"citing_paper":"/paper/2605.27535"},"observation_digest":"sha256:53785161cb9dc77f0e9c211652e96a8bba40dbe26b79bcd2f46c8e697be48ed6","observation_id":"91b426a9-59ad-4c31-a106-ccf588d8e349","resolution":{"observed_at":"2026-06-29T17:13:44.422299Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[{"edge_observation":{"observed_at":"2026-07-11T03:19:04.058207+00:00","source":"paper_reference_links","state":"open"},"event_date":"2024-07-03","event_type":"correction","notice_doi":"10.1007/s12190-024-02164-7","provenance":{"observed_at":"2026-07-11T03:05:05.605732+00:00","source":"crossref","source_record_id":"10.1007/s12190-024-02164-7->10.1007/s12190-024-02142-z:correction"}}],"reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T17:04:39.234160Z","title":"New criteria for linear maps in AES-like ciphers,","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2605.27535","last_updated":"2026-05-26T18:07:27Z","snapshot_observed_at":"2026-08-17T17:24:44.148552Z","submitted_at":"2026-05-26T18:07:27Z","title":"Analyzing Linear Layers in Related-Differential Cryptanalysis","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-06-29T17:04:39.234160Z"},"links":{"citing_paper":"/paper/2605.27535"},"observation_digest":"sha256:4b247a665a9b3d6494682d07eb65abda62bdedc33d537a49a54716a3beeb2b3d","observation_id":"eec4caa4-c251-4b61-9c05-0da7cdef5195","resolution":{"observed_at":"2026-06-29T17:04:39.234160Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T17:04:39.234160Z","title":"New key-recovery attack on reduced-round aes,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2605.27535","last_updated":"2026-05-26T18:07:27Z","snapshot_observed_at":"2026-08-17T17:24:44.148552Z","submitted_at":"2026-05-26T18:07:27Z","title":"Analyzing Linear Layers in Related-Differential Cryptanalysis","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-06-29T17:04:39.234160Z"},"links":{"citing_paper":"/paper/2605.27535"},"observation_digest":"sha256:735b6d8fdfef150689100c2534096b3d56acf68e1968cc29d030b6e1149a9013","observation_id":"41639341-58f8-412a-9680-42b1975e1df6","resolution":{"observed_at":"2026-06-29T17:04:39.234160Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1007/978-3-319-70694-8","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Homomorphic encryption for arithmetic of approximate numbers","venue":"Lecture notes in computer science","work_id":"d91c809d-9059-4f76-a663-4f3f89352ff1","year":2017},"citing_paper":{"arxiv_id":"2605.27535","last_updated":"2026-05-26T18:07:27Z","snapshot_observed_at":"2026-08-17T17:24:44.148552Z","submitted_at":"2026-05-26T18:07:27Z","title":"Analyzing Linear Layers in Related-Differential Cryptanalysis","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-06-29T17:04:39.234160Z"},"links":{"citing_paper":"/paper/2605.27535"},"observation_digest":"sha256:b56b9f40d843139f8a05fc209c6e296012291b7db0f4dc4c736b7e3669f473d2","observation_id":"c2a276e6-537b-4368-a680-24e1f05ba3be","resolution":{"observed_at":"2026-06-29T17:13:44.420174Z","resolver_source":"doi","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T17:04:39.234160Z","title":"Construction of hadamard-based mixcolumns matrices resistant to related-differential cryptanalysis,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2605.27535","last_updated":"2026-05-26T18:07:27Z","snapshot_observed_at":"2026-08-17T17:24:44.148552Z","submitted_at":"2026-05-26T18:07:27Z","title":"Analyzing Linear Layers in Related-Differential Cryptanalysis","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-06-29T17:04:39.234160Z"},"links":{"citing_paper":"/paper/2605.27535"},"observation_digest":"sha256:0b449ba73e6531cfbde56da2e7ed587a2f20301c79f35f0a7b5e3bf2f0c50f6d","observation_id":"515ffbe3-1a57-4316-a496-94b853c93d81","resolution":{"observed_at":"2026-06-29T17:04:39.234160Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T17:04:39.234160Z","title":"On the Cryptographic Resilience of MDS Matrices,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2605.27535","last_updated":"2026-05-26T18:07:27Z","snapshot_observed_at":"2026-08-17T17:24:44.148552Z","submitted_at":"2026-05-26T18:07:27Z","title":"Analyzing Linear Layers in Related-Differential Cryptanalysis","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-06-29T17:04:39.234160Z"},"links":{"citing_paper":"/paper/2605.27535"},"observation_digest":"sha256:1e54ea428c7941209d01e6720128ce7d90a85a65946a932815163741b8b6474b","observation_id":"d4ec6bc7-90b7-4f5f-9aa9-63cae53a0cad","resolution":{"observed_at":"2026-06-29T17:04:39.234160Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T17:04:39.234160Z","title":"Block Ciphers – Focus on the Linear Layer (feat. PRIDE),","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2605.27535","last_updated":"2026-05-26T18:07:27Z","snapshot_observed_at":"2026-08-17T17:24:44.148552Z","submitted_at":"2026-05-26T18:07:27Z","title":"Analyzing Linear Layers in Related-Differential Cryptanalysis","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-06-29T17:04:39.234160Z"},"links":{"citing_paper":"/paper/2605.27535"},"observation_digest":"sha256:ce9bd8c2148059799616df0986db091941924a45c88d118d08dbe8d648fc320a","observation_id":"cbcfe240-845a-4ca8-8be6-80d7dcd362be","resolution":{"observed_at":"2026-06-29T17:04:39.234160Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T17:04:39.234160Z","title":"Midori: A Block Cipher for Low Energy,","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2605.27535","last_updated":"2026-05-26T18:07:27Z","snapshot_observed_at":"2026-08-17T17:24:44.148552Z","submitted_at":"2026-05-26T18:07:27Z","title":"Analyzing Linear Layers in Related-Differential Cryptanalysis","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-06-29T17:04:39.234160Z"},"links":{"citing_paper":"/paper/2605.27535"},"observation_digest":"sha256:b6f83b47d28ae5e6a5e2256ebc5fe88e123f890a6fdd8a1c11cbdbb2069cf7d7","observation_id":"f23e3b2c-f3d7-4cb0-b07e-e469a480f944","resolution":{"observed_at":"2026-06-29T17:04:39.234160Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T17:04:39.234160Z","title":"The SKINNY Family of Block Ciphers and Its Low-Latency Variant MANTIS,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2605.27535","last_updated":"2026-05-26T18:07:27Z","snapshot_observed_at":"2026-08-17T17:24:44.148552Z","submitted_at":"2026-05-26T18:07:27Z","title":"Analyzing Linear Layers in Related-Differential Cryptanalysis","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-06-29T17:04:39.234160Z"},"links":{"citing_paper":"/paper/2605.27535"},"observation_digest":"sha256:d746e31fe8eccfa01e4a3b227ef4c7cb424f957e1a09e890c7b03884de0b56f5","observation_id":"c87ccbed-dc5c-480d-aa49-7222b7746a46","resolution":{"observed_at":"2026-06-29T17:04:39.234160Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T17:04:39.234160Z","title":"Fides: Lightweight Authenticated cipher with Side-Channel Resistance for Constrained Hardware,","venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"2605.27535","last_updated":"2026-05-26T18:07:27Z","snapshot_observed_at":"2026-08-17T17:24:44.148552Z","submitted_at":"2026-05-26T18:07:27Z","title":"Analyzing Linear Layers in Related-Differential Cryptanalysis","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-06-29T17:04:39.234160Z"},"links":{"citing_paper":"/paper/2605.27535"},"observation_digest":"sha256:6b90f4111fe0ab2f086b5dd0d7a188fd0293df4e6e642005f4e1d75522d5ce63","observation_id":"da03ecd9-70f7-4b15-89f7-5fdd666272b4","resolution":{"observed_at":"2026-06-29T17:04:39.234160Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T17:04:39.234160Z","title":"PRINCE – A Low-Latency Block Cipher for Pervasive Computing Applications,","venue":null,"work_id":null,"year":2012},"citing_paper":{"arxiv_id":"2605.27535","last_updated":"2026-05-26T18:07:27Z","snapshot_observed_at":"2026-08-17T17:24:44.148552Z","submitted_at":"2026-05-26T18:07:27Z","title":"Analyzing Linear Layers in Related-Differential Cryptanalysis","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-06-29T17:04:39.234160Z"},"links":{"citing_paper":"/paper/2605.27535"},"observation_digest":"sha256:841ae71190a907c730fa61e948609e59bf6136d6f432904c0487f26208548e39","observation_id":"6d8f3122-a9f9-4f01-afb4-f7e6aea85931","resolution":{"observed_at":"2026-06-29T17:04:39.234160Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-29T17:04:39.234160Z","title":"MacWilliams and N","venue":null,"work_id":null,"year":1977},"citing_paper":{"arxiv_id":"2605.27535","last_updated":"2026-05-26T18:07:27Z","snapshot_observed_at":"2026-08-17T17:24:44.148552Z","submitted_at":"2026-05-26T18:07:27Z","title":"Analyzing Linear Layers in Related-Differential Cryptanalysis","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-06-29T17:04:39.234160Z"},"links":{"citing_paper":"/paper/2605.27535"},"observation_digest":"sha256:f27e853059885e5e8c3ae3584de3102ededaba72073c978d982625d5d409110b","observation_id":"2a82d379-7f3b-47e2-ac80-e25c3a139d34","resolution":{"observed_at":"2026-06-29T17:04:39.234160Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2605.27535","last_updated":"2026-05-26T18:07:27Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-17T17:24:44.148552Z","submitted_at":"2026-05-26T18:07:27Z","title":"Analyzing Linear Layers in Related-Differential Cryptanalysis"},"reference_resolution":{"displayed":31,"state_counts":{"malformed_identifier":0,"metadata_mismatch":1,"parse_uncertain":0,"unresolved":28,"verified_exact":2,"verified_fuzzy":0},"total_outbound_references":31},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"thesis":"As of 24 August 2026, this Paper Citation Record lists 31 of 31 outbound references and 0 inbound Pith citation observations for arXiv:2605.27535."}