Divisibility of the Hamming Weight by 2k and Monomial Criteria for Boolean Functions. - Dmitry Khovratovich (IACR Cryptol. ePrint Arch., 2006)

Collision Attacks on AES-Based MAC: Alpha-MAC. - Alex Biryukov; Andrey Bogdanov; Dmitry Khovratovich; Timo Kasper (CHES, 2007)

Two New Techniques of Side-Channel Cryptanalysis. - Alex Biryukov; Dmitry Khovratovich (CHES, 2007)

Two Attacks on RadioGatún. - Dmitry Khovratovich (INDOCRYPT, 2008)

Cryptanalysis of EnRUPT. - Dmitry Khovratovich; Ivica Nikolic (IACR Cryptol. ePrint Arch., 2008)

New State Recovery Attack on RC4. - Alexander Maximov; Dmitry Khovratovich (IACR Cryptol. ePrint Arch., 2008)

Distinguisher and Related-Key Attack on the Full AES-256. - Alex Biryukov; Dmitry Khovratovich; Ivica Nikolic (CRYPTO, 2009)

Speeding up Collision Search for Byte-Oriented Hash Functions. - Dmitry Khovratovich; Alex Biryukov; Ivica Nikolic (CT-RSA, 2009)

Cryptanalysis of the LAKE Hash Family. - Alex Biryukov; Praveen Gauravaram; Jian Guo 001; Dmitry Khovratovich; San Ling; Krystian Matusiewicz; Ivica Nikolic; Josef Pieprzyk; Huaxiong Wang (FSE, 2009)

Meet-in-the-Middle Attacks on SHA-3 Candidates. - Dmitry Khovratovich; Ivica Nikolic; Ralf-Philipp Weinmann (FSE, 2009)

Cryptanalysis of Hash Functions with Structures. - Dmitry Khovratovich (Selected Areas in Cryptography, 2009)

Key Recovery Attacks of Practical Complexity on AES Variants With Up To 10 Rounds. - Alex Biryukov; Orr Dunkelman; Nathan Keller; Dmitry Khovratovich; Adi Shamir (IACR Cryptol. ePrint Arch., 2009)

Related-key Cryptanalysis of the Full AES-192 and AES-256. - Alex Biryukov; Dmitry Khovratovich (IACR Cryptol. ePrint Arch., 2009)

Distinguisher and Related-Key Attack on the Full AES-256 (Extended Version). - Alex Biryukov; Dmitry Khovratovich; Ivica Nikolic (IACR Cryptol. ePrint Arch., 2009)

Examples of differential multicollisions for 13 and 14 rounds of AES-256. - Alex Biryukov; Dmitry Khovratovich; Ivica Nikolic (IACR Cryptol. ePrint Arch., 2009)

Key Recovery Attacks of Practical Complexity on AES-256 Variants with up to 10 Rounds. - Alex Biryukov; Orr Dunkelman; Nathan Keller; Dmitry Khovratovich; Adi Shamir (EUROCRYPT, 2010)

Rotational Cryptanalysis of ARX. - Dmitry Khovratovich; Ivica Nikolic (FSE, 2010)

Cryptanalysis of Luffa v2 Components. - Dmitry Khovratovich; María Naya-Plasencia; Andrea Röck; Martin Schläffer (Selected Areas in Cryptography, 2010)

Feasible Attack on the 13-round AES-256. - Alex Biryukov; Dmitry Khovratovich (IACR Cryptol. ePrint Arch., 2010)

Biclique Cryptanalysis of the Full AES. - Andrey Bogdanov; Dmitry Khovratovich; Christian Rechberger (IACR Cryptol. ePrint Arch., 2011)

Bicliques for Preimages: Attacks on Skein-512 and the SHA-2 family. - Dmitry Khovratovich; Christian Rechberger; Alexandra Savelieva (IACR Cryptol. ePrint Arch., 2011)

Narrow-Bicliques: Cryptanalysis of Full IDEA. - Dmitry Khovratovich; Gaëtan Leurent; Christian Rechberger (EUROCRYPT, 2012)

Bicliques for permutations: collision and preimage attacks in stronger settings. - Dmitry Khovratovich (IACR Cryptol. ePrint Arch., 2012)

New Preimage Attacks Against Reduced SHA-1. - Simon Knellwolf; Dmitry Khovratovich (IACR Cryptol. ePrint Arch., 2012)

Key Wrapping with a Fixed Permutation. - Dmitry Khovratovich (IACR Cryptol. ePrint Arch., 2013)

The LOCAL attack: Cryptanalysis of the authenticated encryption scheme ALE. - Dmitry Khovratovich; Christian Rechberger (IACR Cryptol. ePrint Arch., 2013)

Cryptographic Schemes Based on the ASASA Structure: Black-Box, White-Box, and Public-Key (Extended Abstract). - Alex Biryukov; Charles Bouillaguet; Dmitry Khovratovich (ASIACRYPT (1), 2014)

Deanonymisation of Clients in Bitcoin P2P Network. - Alex Biryukov; Dmitry Khovratovich; Ivan Pustogarov (CCS, 2014)

PAEQ: Parallelizable Permutation-Based Authenticated Encryption. - Alex Biryukov; Dmitry Khovratovich (ISC, 2014)

Cryptographic Schemes Based on the ASASA Structure: Black-box, White-box, and Public-key. - Alex Biryukov; Charles Bouillaguet; Dmitry Khovratovich (IACR Cryptol. ePrint Arch., 2014)

Collision Spectrum, Entropy Loss, T-Sponges, and Cryptanalysis of GLUON-64. - Léo Perrin; Dmitry Khovratovich (IACR Cryptol. ePrint Arch., 2014)

Rotational Rebound Attacks on Reduced Skein. - Dmitry Khovratovich; Ivica Nikolic; Christian Rechberger (J. Cryptol., 2014)

Fast and Tradeoff-Resilient Memory-Hard Functions for Cryptocurrencies and Password Hashing. - Alex Biryukov; Daniel Dinu; Dmitry Khovratovich (IACR Cryptol. ePrint Arch., 2015)

Tradeoff Cryptanalysis of Memory-Hard Functions. - Alex Biryukov; Dmitry Khovratovich (IACR Cryptol. ePrint Arch., 2015)

Decomposition attack on SASASASAS. - Alex Biryukov; Dmitry Khovratovich (IACR Cryptol. ePrint Arch., 2015)

Asymmetric proof-of-work based on the Generalized Birthday problem. - Alex Biryukov; Dmitry Khovratovich (IACR Cryptol. ePrint Arch., 2015)

Rotational Cryptanalysis of ARX Revisited. - Dmitry Khovratovich; Ivica Nikolic; Josef Pieprzyk; Przemyslaw Sokolowski; Ron Steinfeld (IACR Cryptol. ePrint Arch., 2015)

Argon2: New Generation of Memory-Hard Functions for Password Hashing and Other Applications. - Alex Biryukov; Daniel Dinu; Dmitry Khovratovich (EuroS&P, 2016)

Egalitarian Computing. - Alex Biryukov; Dmitry Khovratovich (USENIX Security Symposium, 2016)

Multiset-Algebraic Cryptanalysis of Reduced Kuznyechik, Khazad, and secret SPNs. - Alex Biryukov; Dmitry Khovratovich; Léo Perrin (IACR Trans. Symmetric Cryptol., 2016)

BIP32-Ed25519: Hierarchical Deterministic Keys over a Non-linear Keyspace. - Dmitry Khovratovich; Jason Law (EuroS&P Workshops, 2017)

Findel: Secure Derivative Contracts for Ethereum. - Alex Biryukov; Dmitry Khovratovich; Sergei Tikhomirov (Financial Cryptography Workshops, 2017)

Guru: Universal Reputation Module for Distributed Consensus Protocols. - Alex Biryukov; Daniel Feher; Dmitry Khovratovich (IACR Cryptol. ePrint Arch., 2017)

Equihash: Asymmetric Proof-of-Work Based on the Generalized Birthday Problem. - Alex Biryukov; Dmitry Khovratovich (Ledger, 2017)

Algebraic Cryptanalysis of STARK-Friendly Designs: Application to MARVELlous and MiMC. - Martin R. Albrecht; Carlos Cid; Lorenzo Grassi 001; Dmitry Khovratovich; Reinhard Lüftenegger; Christian Rechberger; Markus Schofnegger (IACR Cryptol. ePrint Arch., 2019)

Starkad and Poseidon: New Hash Functions for Zero Knowledge Proof Systems. - Lorenzo Grassi 001; Daniel Kales; Dmitry Khovratovich; Arnab Roy 005; Christian Rechberger; Markus Schofnegger (IACR Cryptol. ePrint Arch., 2019)

Key recovery attacks on the Legendre PRFs within the birthday bound. - Dmitry Khovratovich (IACR Cryptol. ePrint Arch., 2019)

Triathlon of lightweight block ciphers for the Internet of things. - Daniel Dinu; Yann Le Corre; Dmitry Khovratovich; Léo Perrin; Johann Großschädl; Alex Biryukov (J. Cryptogr. Eng., 2019)

Aggregatable Subvector Commitments for Stateless Cryptocurrencies. - Alin Tomescu; Ittai Abraham; Vitalik Buterin; Justin Drake; Dankrad Feist; Dmitry Khovratovich (IACR Cryptol. ePrint Arch., 2020)

T₅: Hashing Five Inputs with Three Compression Calls. - Yevgeniy Dodis; Dmitry Khovratovich; Nicky Mouha; Mridul Nandi (ITC, 2021)

Poseidon: A New Hash Function for Zero-Knowledge Proof Systems. - Lorenzo Grassi 001; Dmitry Khovratovich; Christian Rechberger; Arnab Roy 005; Markus Schofnegger (USENIX Security Symposium, 2021)

Reinforced Concrete: Fast Hash Function for Zero Knowledge Proofs and Verifiable Computation. - Mario Barbara; Lorenzo Grassi 001; Dmitry Khovratovich; Reinhard Lüftenegger; Christian Rechberger; Markus Schofnegger; Roman Walch (IACR Cryptol. ePrint Arch., 2021)

T5: Hashing Five Inputs with Three Compression Calls. - Yevgeniy Dodis; Dmitry Khovratovich; Nicky Mouha; Mridul Nandi (IACR Cryptol. ePrint Arch., 2021)

The Legendre Symbol and the Modulo-2 Operator in Symmetric Schemes over (F_p)^n. - Lorenzo Grassi 001; Dmitry Khovratovich; Sondre Rønjom; Markus Schofnegger (IACR Cryptol. ePrint Arch., 2021)

Argon2 Memory-Hard Function for Password Hashing and Proof-of-Work Applications. - Alex Biryukov; Daniel Dinu; Dmitry Khovratovich; Simon Josefsson (RFC, 2021)

Reinforced Concrete: A Fast Hash Function for Verifiable Computation. - Lorenzo Grassi 001; Dmitry Khovratovich; Reinhard Lüftenegger; Christian Rechberger; Markus Schofnegger; Roman Walch (CCS, 2022)

flookup: Fractional decomposition-based lookups in quasi-linear time independent of table size. - Ariel Gabizon; Dmitry Khovratovich (IACR Cryptol. ePrint Arch., 2022)

MinRoot: Candidate Sequential Function for Ethereum VDF. - Dmitry Khovratovich; Mary Maller; Pratyush Ranjan Tiwari (IACR Cryptol. ePrint Arch., 2022)

Caulk: Lookup Arguments in Sublinear Time. - Arantxa Zapico; Vitalik Buterin; Dmitry Khovratovich; Mary Maller; Anca Nitulescu; Mark Simkin 001 (IACR Cryptol. ePrint Arch., 2022)

Baloo: Nearly Optimal Lookup Arguments. - Arantxa Zapico; Ariel Gabizon; Dmitry Khovratovich; Mary Maller; Carla Ràfols (IACR Cryptol. ePrint Arch., 2022)

The Legendre Symbol and the Modulo-2 Operator in Symmetric Schemes over Fnp Preimage Attack on Full Grendel. - Lorenzo Grassi 001; Dmitry Khovratovich; Sondre Rønjom; Markus Schofnegger (IACR Trans. Symmetric Cryptol., 2022)

Hash Functions Monolith for ZK Applications: May the Speed of SHA-3 be With You. - Lorenzo Grassi 001; Dmitry Khovratovich; Reinhard Lüftenegger; Christian Rechberger; Markus Schofnegger; Roman Walch (IACR Cryptol. ePrint Arch., 2023)

SAFE: Sponge API for Field Elements. - Jean-Philippe Aumasson; Dmitry Khovratovich; Bart Mennink; Porçu Quine (IACR Cryptol. ePrint Arch., 2023)

Fast amortized KZG proofs. - Dankrad Feist; Dmitry Khovratovich (IACR Cryptol. ePrint Arch., 2023)

Poseidon2: A Faster Version of the Poseidon Hash Function. - Lorenzo Grassi 001; Dmitry Khovratovich; Markus Schofnegger (IACR Cryptol. ePrint Arch., 2023)

Generic Security of the SAFE API and Its Applications. - Dmitry Khovratovich; Mario Marhuenda Beltrán; Bart Mennink (IACR Cryptol. ePrint Arch., 2023)

Cryptanalysis of Algebraic Verifiable Delay Functions. - Alex Biryukov; Ben Fisch; Gottfried Herold; Dmitry Khovratovich; Gaëtan Leurent; María Naya-Plasencia; Benjamin Wesolowski (IACR Cryptol. ePrint Arch., 2024)

Monolith: Circuit-Friendly Hash Functions with New Nonlinear Layers for Fast and Constant-Time Implementations. - Lorenzo Grassi 001; Dmitry Khovratovich; Reinhard Lüftenegger; Christian Rechberger; Markus Schofnegger; Roman Walch (IACR Trans. Symmetric Cryptol., 2024)

Hash-Based Multi-Signatures for Post-Quantum Ethereum. - Justin Drake; Dmitry Khovratovich; Mikhail A. Kudinov; Benedikt Wagner (IACR Commun. Cryptol., 2025)

Baloo: Algebraic Lookup Arguments. - Arantxa Zapico; Ariel Gabizon; Dmitry Khovratovich; Mary Maller; Carla Ràfols (IACR Commun. Cryptol., 2025)

Technical Note: LeanSig for Post-Quantum Ethereum. - Justin Drake; Dmitry Khovratovich; Mikhail A. Kudinov; Benedikt Wagner (IACR Cryptol. ePrint Arch., 2025)

At the Top of the Hypercube - Better Size-Time Tradeoffs for Hash-Based Signatures. - Dmitry Khovratovich; Mikhail A. Kudinov; Benedikt Wagner (IACR Cryptol. ePrint Arch., 2025)

How to Prove False Statements: Practical Attacks on Fiat-Shamir. - Dmitry Khovratovich; Ron D. Rothblum; Lev Soukhanov (IACR Cryptol. ePrint Arch., 2025)

Skyscraper: Fast Hashing on Big Primes. - Clémence Bouvier; Lorenzo Grassi 001; Dmitry Khovratovich; Katharina Koschatko; Christian Rechberger; Fabian Schmid; Markus Schofnegger (IACR Trans. Cryptogr. Hardw. Embed. Syst., 2025)