The Impact of Carries on the Complexity of Collision Attacks on SHA-1. - Florian Mendel; Norbert Pramstaller; Christian Rechberger; Vincent Rijmen (FSE, 2006)

Improved Collision Attack on the Hash Function Proposed at PKC'98. - Florian Mendel; Norbert Pramstaller; Christian Rechberger (ICISC, 2006)

Update on Tiger. - Florian Mendel; Bart Preneel; Vincent Rijmen; Hirotaka Yoshida; Dai Watanabe (INDOCRYPT, 2006)

On the Collision Resistance of RIPEMD-160. - Florian Mendel; Norbert Pramstaller; Christian Rechberger; Vincent Rijmen (ISC, 2006)

Colliding Message Pair for 53-Step HAS-160. - Florian Mendel (IACR Cryptol. ePrint Arch., 2006)

Cryptanalysis of the Tiger Hash Function. - Florian Mendel; Vincent Rijmen (ASIACRYPT, 2007)

Cryptanalysis of Reduced Variants of the FORK-256 Hash Function. - Florian Mendel; Joseph Lano; Bart Preneel (CT-RSA, 2007)

Colliding Message Pair for 53-Step HAS-160. - Florian Mendel; Vincent Rijmen (ICISC, 2007)

Weaknesses in the HAS-V Compression Function. - Florian Mendel; Vincent Rijmen (ICISC, 2007)

Collisions for 70-Step SHA-1: On the Full Cost of Collision Search. - Christophe De Cannière; Florian Mendel; Christian Rechberger (Selected Areas in Cryptography, 2007)

Cryptanalysis of the GOST Hash Function. - Florian Mendel; Norbert Pramstaller; Christian Rechberger; Marcin Kontak; Janusz Szmidt (CRYPTO, 2008)

A (Second) Preimage Attack on the GOST Hash Function. - Florian Mendel; Norbert Pramstaller; Christian Rechberger (FSE, 2008)

Preimage Attacks on 3-Pass HAVAL and Step-Reduced MD5. - Jean-Philippe Aumasson; Willi Meier; Florian Mendel (IACR Cryptol. ePrint Arch., 2008)

Collisions and other Non-Random Properties for Step-Reduced SHA-256. - Sebastiaan Indesteege; Florian Mendel; Bart Preneel; Christian Rechberger (IACR Cryptol. ePrint Arch., 2008)

Analysis of Step-Reduced SHA-256. - Florian Mendel; Norbert Pramstaller; Christian Rechberger; Vincent Rijmen (IACR Cryptol. ePrint Arch., 2008)

Collisions for Round-Reduced LAKE. - Florian Mendel; Martin Schläffer (IACR Cryptol. ePrint Arch., 2008)

Collision Attack on Boole. - Florian Mendel; Tomislav Nad; Martin Schläffer (ACNS, 2009)

Cryptanalysis of Twister. - Florian Mendel; Christian Rechberger; Martin Schläffer (ACNS, 2009)

Cryptanalysis of Vortex. - Jean-Philippe Aumasson; Orr Dunkelman; Florian Mendel; Christian Rechberger; Søren S. Thomsen (AFRICACRYPT, 2009)

Two Passes of Tiger Are Not One-Way. - Florian Mendel (AFRICACRYPT, 2009)

Rebound Distinguishers: Results on the Full Whirlpool Compression Function. - Mario Lamberger; Florian Mendel; Christian Rechberger; Vincent Rijmen; Martin Schläffer (ASIACRYPT, 2009)

MD5 Is Weaker Than Weak: Attacks on Concatenated Combiners. - Florian Mendel; Christian Rechberger; Martin Schläffer (ASIACRYPT, 2009)

Grøstl - a SHA-3 candidate. - Praveen Gauravaram; Lars R. Knudsen; Krystian Matusiewicz; Florian Mendel; Christian Rechberger; Martin Schläffer; Søren S. Thomsen (Symmetric Cryptography, 2009)

Cryptanalysis of MDC-2. - Lars R. Knudsen; Florian Mendel; Christian Rechberger; Søren S. Thomsen (EUROCRYPT, 2009)

The Rebound Attack: Cryptanalysis of Reduced Whirlpool and Grøstl. - Florian Mendel; Christian Rechberger; Martin Schläffer; Søren S. Thomsen (FSE, 2009)

A Distinguisher for the Compression Function of SIMD-512. - Florian Mendel; Tomislav Nad (INDOCRYPT, 2009)

Structural Attacks on Two SHA-3 Candidates: Blender-n and DCH-n. - Mario Lamberger; Florian Mendel (ISC, 2009)

On Free-Start Collisions and Collisions for TIB3. - Florian Mendel; Martin Schläffer (ISC, 2009)

Practical Collisions for SHAMATA-256. - Sebastiaan Indesteege; Florian Mendel; Bart Preneel; Martin Schläffer (Selected Areas in Cryptography, 2009)

Improved Cryptanalysis of the Reduced Grøstl Compression Function, ECHO Permutation and AES Block Cipher. - Florian Mendel; Thomas Peyrin; Christian Rechberger; Martin Schläffer (Selected Areas in Cryptography, 2009)

Cryptanalysis of the 10-Round Hash and Full Compression Function of SHAvite-3-512. - Praveen Gauravaram; Gaëtan Leurent; Florian Mendel; María Naya-Plasencia; Thomas Peyrin; Christian Rechberger; Martin Schläffer (AFRICACRYPT, 2010)

Rebound Attacks on the Reduced Grøstl Hash Function. - Florian Mendel; Christian Rechberger; Martin Schläffer; Søren S. Thomsen (CT-RSA, 2010)

Practical Attacks on the Maelstrom-0 Compression Function. - Stefan Kölbl; Florian Mendel (ACNS, 2011)

Second-Order Differential Collisions for Reduced SHA-256. - Alex Biryukov; Mario Lamberger; Florian Mendel; Ivica Nikolic (ASIACRYPT, 2011)

Finding SHA-2 Characteristics: Searching through a Minefield of Contradictions. - Florian Mendel; Tomislav Nad; Martin Schläffer (ASIACRYPT, 2011)

Cryptanalysis of Round-Reduced HAS-160. - Florian Mendel; Tomislav Nad; Martin Schläffer (ICISC, 2011)

Boomerang Distinguisher for the SIMD-512 Compression Function. - Florian Mendel; Tomislav Nad (INDOCRYPT, 2011)

Higher-Order Differential Attack on Reduced SHA-256. - Mario Lamberger; Florian Mendel (IACR Cryptol. ePrint Arch., 2011)

A Simple Key-Recovery Attack on McOE-X. - Florian Mendel; Bart Mennink; Vincent Rijmen; Elmar Tischhauser (CANS, 2012)

Collision Attacks on the Reduced Dual-Stream Hash Function RIPEMD-128. - Florian Mendel; Tomislav Nad; Martin Schläffer (FSE, 2012)

Collision Attack on the Hamsi-256 Compression Function. - Mario Lamberger; Florian Mendel; Vincent Rijmen (INDOCRYPT, 2012)

Differential Attacks on Reduced RIPEMD-160. - Florian Mendel; Tomislav Nad; Stefan Scherz; Martin Schläffer (ISC, 2012)

Memoryless near-collisions via coding theory. - Mario Lamberger; Florian Mendel; Vincent Rijmen; Koen Simoens (Des. Codes Cryptogr., 2012)

Differential Analysis of the LED Block Cipher. - Florian Mendel; Vincent Rijmen; Deniz Toz; Kerem Varici (IACR Cryptol. ePrint Arch., 2012)

Preimage Attacks against PKC98-Hash and HAS-V. - Yu Sasaki; Florian Mendel; Kazumaro Aoki (IEICE Trans. Fundam. Electron. Commun. Comput. Sci., 2012)

Finding Collisions for Round-Reduced SM3. - Florian Mendel; Tomislav Nad; Martin Schläffer (CT-RSA, 2013)

Collisions for the WIDEA-8 Compression Function. - Florian Mendel; Vincent Rijmen; Deniz Toz; Kerem Varici (CT-RSA, 2013)

ALE: AES-Based Lightweight Authenticated Encryption. - Andrey Bogdanov; Florian Mendel; Francesco Regazzoni 001; Vincent Rijmen; Elmar Tischhauser (FSE, 2013)

Differential Cryptanalysis of Keccak Variants. - Stefan Kölbl; Florian Mendel; Tomislav Nad; Martin Schläffer (IMACC, 2013)

Improved Cryptanalysis of Reduced RIPEMD-160. - Florian Mendel; Thomas Peyrin; Martin Schläffer; Lei Wang 031; Shuang Wu 004 (IACR Cryptol. ePrint Arch., 2013)

Key Recovery Attacks on Recent Authenticated Ciphers. - Andrey Bogdanov; Christoph Dobraunig; Maria Eichlseder; Martin M. Lauridsen; Florian Mendel; Martin Schläffer; Elmar Tischhauser (LATINCRYPT, 2014)

Malicious Hashing: Eve's Variant of SHA-1. - Ange Albertini; Jean-Philippe Aumasson; Maria Eichlseder; Florian Mendel; Martin Schläffer (IACR Cryptol. ePrint Arch., 2014)

Differential Cryptanalysis of SipHash. - Christoph Dobraunig; Florian Mendel; Martin Schläffer (IACR Cryptol. ePrint Arch., 2014)

Branching Heuristics in Differential Collision Search with Applications to SHA-512. - Maria Eichlseder; Florian Mendel; Martin Schläffer (IACR Cryptol. ePrint Arch., 2014)

Collision Attack on 5 Rounds of Grøstl. - Florian Mendel; Vincent Rijmen; Martin Schläffer (IACR Cryptol. ePrint Arch., 2014)

Towards Fresh and Hybrid Re-Keying Schemes with Beyond Birthday Security. - Christoph Dobraunig; François Koeune; Stefan Mangard; Florian Mendel; François-Xavier Standaert (CARDIS, 2015)

FIDES: Lightweight Authenticated Cipher with Side-Channel Resistance for Constrained Hardware. - Begül Bilgin; Andrey Bogdanov; Miroslav Knezevic; Florian Mendel; Qingju Wang 001 (IACR Cryptol. ePrint Arch., 2015)

Related-Key Forgeries for Prøst-OTR. - Christoph Dobraunig; Maria Eichlseder; Florian Mendel (IACR Cryptol. ePrint Arch., 2015)

Forgery Attacks on round-reduced ICEPOLE-128. - Christoph Dobraunig; Maria Eichlseder; Florian Mendel (IACR Cryptol. ePrint Arch., 2015)

Higher-order cryptanalysis of LowMC. - Christoph Dobraunig; Maria Eichlseder; Florian Mendel (IACR Cryptol. ePrint Arch., 2015)

Analysis of the Kupyna-256 Hash Function. - Christoph Dobraunig; Maria Eichlseder; Florian Mendel (IACR Cryptol. ePrint Arch., 2015)

Heuristic Tool for Linear Cryptanalysis with Applications to CAESAR Candidates. - Christoph Dobraunig; Maria Eichlseder; Florian Mendel (IACR Cryptol. ePrint Arch., 2015)

On the Security of Fresh Re-keying to Counteract Side-Channel and Fault Attacks. - Christoph Dobraunig; Maria Eichlseder; Stefan Mangard; Florian Mendel (IACR Cryptol. ePrint Arch., 2015)

Cryptanalysis of Ascon. - Christoph Dobraunig; Maria Eichlseder; Florian Mendel; Martin Schläffer (IACR Cryptol. ePrint Arch., 2015)

Improving Local Collisions: New Attacks on Reduced SHA-256. - Florian Mendel; Tomislav Nad; Martin Schläffer (IACR Cryptol. ePrint Arch., 2015)

The Rebound Attack and Subspace Distinguishers: Application to Whirlpool. - Mario Lamberger; Florian Mendel; Martin Schläffer; Christian Rechberger; Vincent Rijmen (J. Cryptol., 2015)

Improved Rebound Attacks on AESQ: Core Permutation of CAESAR Candidate PAEQ. - Nasour Bagheri; Florian Mendel; Yu Sasaki (ACISP (2), 2016)

Statistical Fault Attacks on Nonce-Based Authenticated Encryption Schemes. - Christoph Dobraunig; Maria Eichlseder; Thomas Korak; Victor Lomné; Florian Mendel (ASIACRYPT (1), 2016)

Cryptanalysis of Simpira v1. - Christoph Dobraunig; Maria Eichlseder; Florian Mendel (SAC, 2016)

Related-Key Impossible-Differential Attack on Reduced-Round SKINNY. - Ralph Ankele; Subhadeep Banik; Avik Chakraborti; Eik List; Florian Mendel; Siang Meng Sim; Gaoli Wang (IACR Cryptol. ePrint Arch., 2016)

Cryptanalysis of Reduced NORX. - Nasour Bagheri; Tao Huang 015; Keting Jia; Florian Mendel; Yu Sasaki (IACR Cryptol. ePrint Arch., 2016)

Practical Fault Attacks on Authenticated Encryption Modes for AES. - Christoph Dobraunig; Maria Eichlseder; Thomas Korak; Victor Lomné; Florian Mendel (IACR Cryptol. ePrint Arch., 2016)

Side-Channel Analysis of Keymill. - Christoph Dobraunig; Maria Eichlseder; Thomas Korak; Florian Mendel (IACR Cryptol. ePrint Arch., 2016)

Cryptanalysis of Simpira. - Christoph Dobraunig; Maria Eichlseder; Florian Mendel (IACR Cryptol. ePrint Arch., 2016)

Square Attack on 7-Round Kiasu-BC. - Christoph Dobraunig; Maria Eichlseder; Florian Mendel (IACR Cryptol. ePrint Arch., 2016)

Analysis of SHA-512/224 and SHA-512/256. - Christoph Dobraunig; Maria Eichlseder; Florian Mendel (IACR Cryptol. ePrint Arch., 2016)

Key Recovery for MANTIS-5. - Christoph Dobraunig; Maria Eichlseder; Florian Mendel (IACR Cryptol. ePrint Arch., 2016)

ISAP - Authenticated Encryption Inherently Secure Against Passive Side-Channel Attacks. - Christoph Dobraunig; Maria Eichlseder; Stefan Mangard; Florian Mendel; Thomas Unterluggauer (IACR Cryptol. ePrint Arch., 2016)

Haraka - Efficient Short-Input Hashing for Post-Quantum Applications. - Stefan Kölbl; Martin M. Lauridsen; Florian Mendel; Christian Rechberger (IACR Cryptol. ePrint Arch., 2016)

Practical Key-Recovery Attack on MANTIS5. - Christoph Dobraunig; Maria Eichlseder; Daniel Kales; Florian Mendel (IACR Trans. Symmetric Cryptol., 2016)

Haraka v2 - Efficient Short-Input Hashing for Post-Quantum Applications. - Stefan Kölbl; Martin M. Lauridsen; Florian Mendel; Christian Rechberger (IACR Trans. Symmetric Cryptol., 2016)

Gimli: a cross-platform permutation. - Daniel J. Bernstein; Stefan Kölbl; Stefan Lucks; Pedro Maat Costa Massolino; Florian Mendel; Kashif Nawaz; Tobias Schneider 002; Peter Schwabe; François-Xavier Standaert; Yosuke Todo; Benoît Viguier (IACR Cryptol. ePrint Arch., 2017)

Note on the Robustness of CAESAR Candidates. - Daniel Kales; Maria Eichlseder; Florian Mendel (IACR Cryptol. ePrint Arch., 2017)

Collisions and Semi-Free-Start Collisions for Round-Reduced RIPEMD-160. - Fukang Liu; Florian Mendel; Gaoli Wang (IACR Cryptol. ePrint Arch., 2017)

ISAP - Towards Side-Channel Secure Authenticated Encryption. - Christoph Dobraunig; Maria Eichlseder; Stefan Mangard; Florian Mendel; Thomas Unterluggauer (IACR Trans. Symmetric Cryptol., 2017)

Rasta: A cipher with low ANDdepth and few ANDs per bit. - Christoph Dobraunig; Maria Eichlseder; Lorenzo Grassi 001; Virginie Lallemand; Gregor Leander; Eik List; Florian Mendel; Christian Rechberger (IACR Cryptol. ePrint Arch., 2018)

Statistical Ineffective Fault Attacks on Masked AES with Fault Countermeasures. - Christoph Dobraunig; Maria Eichlseder; Hannes Groß; Stefan Mangard; Florian Mendel; Robert Primas (IACR Cryptol. ePrint Arch., 2018)

Exploiting Ineffective Fault Inductions on Symmetric Cryptography. - Christoph Dobraunig; Maria Eichlseder; Thomas Korak; Stefan Mangard; Florian Mendel; Robert Primas (IACR Cryptol. ePrint Arch., 2018)

Algebraic Cryptanalysis of Frit. - Christoph Dobraunig; Maria Eichlseder; Florian Mendel; Markus Schofnegger (IACR Cryptol. ePrint Arch., 2018)

Fault Attacks on Nonce-based Authenticated Encryption: Application to Keyak and Ketje. - Christoph Dobraunig; Stefan Mangard; Florian Mendel; Robert Primas (IACR Cryptol. ePrint Arch., 2018)

SIFA: Exploiting Ineffective Fault Inductions on Symmetric Cryptography. - Christoph Dobraunig; Maria Eichlseder; Thomas Korak; Stefan Mangard; Florian Mendel; Robert Primas (IACR Trans. Cryptogr. Hardw. Embed. Syst., 2018)

Preface to Volume 2018, Issue 1. - Florian Mendel; María Naya-Plasencia (IACR Trans. Symmetric Cryptol., 2018)

Efficient Collision Attack Frameworks for RIPEMD-160. - Fukang Liu; Christoph Dobraunig; Florian Mendel; Takanori Isobe 001; Gaoli Wang; Zhenfu Cao (CRYPTO (2), 2019)

Algebraic Cryptanalysis of Variants of Frit. - Christoph Dobraunig; Maria Eichlseder; Florian Mendel; Markus Schofnegger (SAC, 2019)

New Semi-Free-Start Collision Attack Framework for Reduced RIPEMD-160. - Fukang Liu; Christoph Dobraunig; Florian Mendel; Takanori Isobe 001; Gaoli Wang; Zhenfu Cao (IACR Trans. Symmetric Cryptol., 2019)

Preface to Volume 2019, Issue 1. - Florian Mendel; Yu Sasaki (IACR Trans. Symmetric Cryptol., 2019)

Improved (semi-free-start/near-) collision and distinguishing attacks on round-reduced RIPEMD-160. - Gaoli Wang; Fukang Liu; Binbin Cui; Florian Mendel; Christoph Dobraunig (Des. Codes Cryptogr., 2020)

Practical forgeries for ORANGE. - Christoph Dobraunig; Florian Mendel; Bart Mennink (Inf. Process. Lett., 2020)

Protecting against Statistical Ineffective Fault Attacks. - Joan Daemen; Christoph Dobraunig; Maria Eichlseder; Hannes Groß; Florian Mendel; Robert Primas (IACR Trans. Cryptogr. Hardw. Embed. Syst., 2020)

Isap v2.0. - Christoph Dobraunig; Maria Eichlseder; Stefan Mangard; Florian Mendel; Bart Mennink; Robert Primas; Thomas Unterluggauer (IACR Trans. Symmetric Cryptol., 2020)

Ascon PRF, MAC, and Short-Input MAC. - Christoph Dobraunig; Maria Eichlseder; Florian Mendel; Martin Schläffer (IACR Cryptol. ePrint Arch., 2021)

Ascon v1.2: Lightweight Authenticated Encryption and Hashing. - Christoph Dobraunig; Maria Eichlseder; Florian Mendel; Martin Schläffer (J. Cryptol., 2021)

Bounds for the Security of Ascon against Differential and Linear Cryptanalysis. - Johannes Erlacher; Florian Mendel; Maria Eichlseder (IACR Trans. Symmetric Cryptol., 2022)

Efficient Low-Latency Masking of Ascon without Fresh Randomness. - Srinidhi Hari Prasad; Florian Mendel; Martin Schläffer; Rishub Nagpal (IACR Cryptol. ePrint Arch., 2023)

Ascon MAC, PRF, and Short-Input PRF - Lightweight, Fast, and Efficient Pseudorandom Functions. - Christoph Dobraunig; Maria Eichlseder; Florian Mendel; Martin Schläffer (CT-RSA, 2024)

Preliminary Analysis of Ascon-Xof and Ascon-Hash. - Christoph Dobraunig; Maria Eichlseder; Florian Mendel; Martin Schläffer (IACR Cryptol. ePrint Arch., 2024)

Efficient Second-Order Masked Software Implementations of Ascon in Theory and Practice. - Barbara Gigerl; Florian Mendel; Martin Schläffer; Robert Primas (IACR Cryptol. ePrint Arch., 2024)

Smooth Passage with the Guards: Second-Order Hardware Masking of the AES with Low Randomness and Low Latency. - Barbara Gigerl; Franz Klug; Stefan Mangard; Florian Mendel; Robert Primas (IACR Trans. Cryptogr. Hardw. Embed. Syst., 2024)