Visual Secret Sharing Schemes for Multiple Secret Images Allowing the Rotation of Shares. - Mitsugu Iwamoto; Lei Wang 031; Kazuki Yoneyama; Noboru Kunihiro; Kazuo Ohta (IEICE Trans. Fundam. Electron. Commun. Comput. Sci., 2006)

New Message Difference for MD4. - Yu Sasaki; Lei Wang 031; Kazuo Ohta; Noboru Kunihiro (FSE, 2007)

Password Recovery on Challenge and Response: Impossible Differential Attack on Hash Function. - Yu Sasaki; Lei Wang 031; Kazuo Ohta; Noboru Kunihiro (AFRICACRYPT, 2008)

Security of MD5 Challenge and Response: Extension of APOP Password Recovery Attack. - Yu Sasaki; Lei Wang 031; Kazuo Ohta; Noboru Kunihiro (CT-RSA, 2008)

New Key-Recovery Attacks on HMAC/NMAC-MD4 and NMAC-MD5. - Lei Wang 031; Kazuo Ohta; Noboru Kunihiro (EUROCRYPT, 2008)

New Message Differences for Collision Attacks on MD4 and MD5. - Yu Sasaki; Lei Wang 031; Noboru Kunihiro; Kazuo Ohta (IEICE Trans. Fundam. Electron. Commun. Comput. Sci., 2008)

Preimages for Step-Reduced SHA-2. - Kazumaro Aoki; Jian Guo 001; Krystian Matusiewicz; Yu Sasaki; Lei Wang 031 (ASIACRYPT, 2009)

How to Confirm Cryptosystems Security: The Original Merkle-Damgård Is Still Alive! - Yusuke Naito 001; Kazuki Yoneyama; Lei Wang 031; Kazuo Ohta (ASIACRYPT, 2009)

Bit-Free Collision: Application to APOP Attack. - Lei Wang 031; Yu Sasaki; Kazuo Sakiyama; Kazuo Ohta (IWSEC, 2009)

How to Construct Cryptosystems and Hash Functions in Weakened Random Oracle Models. - Yusuke Naito 001; Lei Wang 031; Kazuo Ohta (IACR Cryptol. ePrint Arch., 2009)

How to Prove the Security of Practical Cryptosystems with Merkle-Damgård Hashing by Adopting Indifferentiability. - Yusuke Naito 001; Kazuki Yoneyama; Lei Wang 031; Kazuo Ohta (IACR Cryptol. ePrint Arch., 2009)

Security of Practical Cryptosystems Using Merkle-Damgard Hash Function in the Ideal Cipher Model. - Yusuke Naito 001; Kazuki Yoneyama; Lei Wang 031; Kazuo Ohta (IACR Cryptol. ePrint Arch., 2009)

Preimage Attacks on 41-Step SHA-256 and 46-Step SHA-512. - Yu Sasaki; Lei Wang 031; Kazumaro Aoki (IACR Cryptol. ePrint Arch., 2009)

Extended Password Recovery Attacks against APOP, SIP, and Digest Authentication. - Yu Sasaki; Lei Wang 031; Kazuo Ohta; Noboru Kunihiro (IEICE Trans. Fundam. Electron. Commun. Comput. Sci., 2009)

Near-Collision Attacks on MD4: Applied to MD4-Based Protocols. - Lei Wang 031; Kazuo Ohta; Noboru Kunihiro (IEICE Trans. Fundam. Electron. Commun. Comput. Sci., 2009)

Non-full-active Super-Sbox Analysis: Applications to ECHO and Grøstl. - Yu Sasaki; Yang Li 001; Lei Wang 031; Kazuo Sakiyama; Kazuo Ohta (ASIACRYPT, 2010)

Finding Preimages of Tiger Up to 23 Steps. - Lei Wang 031; Yu Sasaki (FSE, 2010)

Practical Password Recovery Attacks on MD4 Based Prefix and Hybrid Authentication Protocols. - Yu Sasaki; Lei Wang 031; Kazuo Ohta; Kazumaro Aoki; Noboru Kunihiro (IEICE Trans. Fundam. Electron. Commun. Comput. Sci., 2010)

Cryptanalysis of Two MD5-Based Authentication Protocols: APOP and NMAC. - Lei Wang 031; Kazuo Ohta; Yu Sasaki; Kazuo Sakiyama; Noboru Kunihiro (IEICE Trans. Inf. Syst., 2010)

(Second) Preimage Attacks on Step-Reduced RIPEMD/RIPEMD-128 with a New Local-Collision Approach. - Lei Wang 031; Yu Sasaki; Wataru Komatsubara; Kazuo Ohta; Kazuo Sakiyama (CT-RSA, 2011)

Security of Cryptosystems Using Merkle-Damgård in the Random Oracle Model. - Yusuke Naito 001; Kazuki Yoneyama; Lei Wang 031; Kazuo Ohta (IEICE Trans. Fundam. Electron. Commun. Comput. Sci., 2011)

Preimage Attack on 23-Step Tiger. - Lei Wang 031; Yu Sasaki (IEICE Trans. Fundam. Electron. Commun. Comput. Sci., 2011)

Distinguishers beyond Three Rounds of the RIPEMD-128/-160 Compression Functions. - Yu Sasaki; Lei Wang 031 (ACNS, 2012)

Three-Subset Meet-in-the-Middle Attack on Reduced XTEA. - Yu Sasaki; Lei Wang 031; Yasuhide Sakai; Kazuo Sakiyama; Kazuo Ohta (AFRICACRYPT, 2012)

Investigating Fundamental Security Requirements on Whirlpool: Improved Preimage and Collision Attacks. - Yu Sasaki; Lei Wang 031; Shuang Wu 004; Wenling Wu (ASIACRYPT, 2012)

Comprehensive Study of Integral Analysis on 22-Round LBlock. - Yu Sasaki; Lei Wang 031 (ICISC, 2012)

New Truncated Differential Cryptanalysis on 3D Block Cipher. - Takuma Koyama; Lei Wang 031; Yu Sasaki; Kazuo Sakiyama; Kazuo Ohta (ISPEC, 2012)

Polynomial-Advantage Cryptanalysis of 3D Cipher and 3D-Based Hash Function. - Lei Wang 031; Yu Sasaki; Kazuo Sakiyama; Kazuo Ohta (IWSEC, 2012)

Boomerang Distinguishers for Full HAS-160 Compression Function. - Yu Sasaki; Lei Wang 031; Yasuhiro Takasaki; Kazuo Sakiyama; Kazuo Ohta (IWSEC, 2012)

Meet-in-the-Middle Technique for Integral Attacks against Feistel Ciphers. - Yu Sasaki; Lei Wang 031 (Selected Areas in Cryptography, 2012)

Generic Related-key Attacks for HMAC. - Thomas Peyrin; Yu Sasaki; Lei Wang 031 (IACR Cryptol. ePrint Arch., 2012)

2-Dimension Sums: Distinguishers Beyond Three Rounds of RIPEMD-128 and RIPEMD-160. - Yu Sasaki; Lei Wang 031 (IACR Cryptol. ePrint Arch., 2012)

Meet-in-the-Middle (Second) Preimage Attacks on Two Double-Branch Hash Functions RIPEMD and RIPEMD-128. - Lei Wang 031; Yu Sasaki; Wataru Komatsubara; Kazuo Sakiyama; Kazuo Ohta (IEICE Trans. Fundam. Electron. Commun. Comput. Sci., 2012)

Cryptanalysis of Round-Reduced mathttLED. - Ivica Nikolic; Lei Wang 031; Shuang Wu 004 (FSE, 2013)

Bitwise Partial-Sum on HIGHT: A New Tool for Integral Analysis Against ARX Designs. - Yu Sasaki; Lei Wang 031 (ICISC, 2013)

Generic State-Recovery and Forgery Attacks on ChopMD-MAC and on NMAC/HMAC. - Yusuke Naito 001; Yu Sasaki; Lei Wang 031; Kan Yasuda (IWSEC, 2013)

Improved Single-Key Distinguisher on HMAC-MD5 and Key Recovery Attacks on Sandwich-MAC-MD5. - Yu Sasaki; Lei Wang 031 (Selected Areas in Cryptography, 2013)

Meet-in-the-Middle Preimage Attacks Revisited - New Results on MD5 and HAVAL. - Yu Sasaki; Wataru Komatsubara; Yasuhide Sakai; Lei Wang 031; Mitsugu Iwamoto; Kazuo Sakiyama; Kazuo Ohta (SECRYPT, 2013)

Analysis of BLAKE2. - Jian Guo 001; Pierre Karpman; Ivica Nikolic; Lei Wang 031; Shuang Wu 004 (IACR Cryptol. ePrint Arch., 2013)

Cryptanalysis of Zorro. - Jian Guo 001; Ivica Nikolic; Thomas Peyrin; Lei Wang 031 (IACR Cryptol. ePrint Arch., 2013)

Improved Cryptanalysis of Reduced RIPEMD-160. - Florian Mendel; Thomas Peyrin; Martin Schläffer; Lei Wang 031; Shuang Wu 004 (IACR Cryptol. ePrint Arch., 2013)

Updates on Generic Attacks against HMAC and NMAC. - Jian Guo 001; Thomas Peyrin; Yu Sasaki; Lei Wang 031 (CRYPTO (1), 2014)

An Automated Evaluation Tool for Improved Rebound Attack: New Distinguishers and Proposals of ShiftBytes Parameters for Grøstl. - Yu Sasaki; Yuuki Tokushige; Lei Wang 031; Mitsugu Iwamoto; Kazuo Ohta (CT-RSA, 2014)

Practical Cryptanalysis of PAES. - Jérémy Jean; Ivica Nikolic; Yu Sasaki; Lei Wang 031 (Selected Areas in Cryptography, 2014)

Generic Attacks on Strengthened HMAC: n-bit Secure HMAC Requires Key in All Blocks. - Yu Sasaki; Lei Wang 031 (SCN, 2014)

The Usage of Counter Revisited: Second-Preimage Attack on New Russian Standardized Hash Function. - Jian Guo 001; Jérémy Jean; Gaëtan Leurent; Thomas Peyrin; Lei Wang 031 (IACR Cryptol. ePrint Arch., 2014)

Breaking POET Authentication with a Single Query. - Jian Guo 001; Jérémy Jean; Thomas Peyrin; Lei Wang 031 (IACR Cryptol. ePrint Arch., 2014)

Impact of ANSI X9.24-1: 2009 Key Check Value on ISO/IEC 9797-1: 2011 MACs. - Tetsu Iwata; Lei Wang 031 (IACR Cryptol. ePrint Arch., 2014)

New Generic Attacks Against Hash-based MACs. - Gaëtan Leurent; Thomas Peyrin; Lei Wang 031 (IACR Cryptol. ePrint Arch., 2014)

Cryptanalysis of JAMBU. - Thomas Peyrin; Siang Meng Sim; Lei Wang 031; Guoyan Zhang (IACR Cryptol. ePrint Arch., 2014)

Generic Universal Forgery Attack on Iterative Hash-based MACs. - Thomas Peyrin; Lei Wang 031 (IACR Cryptol. ePrint Arch., 2014)

A Forgery Attack against PANDA-s. - Yu Sasaki; Lei Wang 031 (IACR Cryptol. ePrint Arch., 2014)

A Practical Universal Forgery Attack against PAES-8. - Yu Sasaki; Lei Wang 031 (IACR Cryptol. ePrint Arch., 2014)

Comprehensive Study of Integral Analysis on LBlock. - Yu Sasaki; Lei Wang 031 (IEICE Trans. Fundam. Electron. Commun. Comput. Sci., 2014)

Distinguishers on Double-Branch Compression Function and Applications to Round-Reduced RIPEMD-128 and RIPEMD-160. - Yu Sasaki; Lei Wang 031 (IEICE Trans. Fundam. Electron. Commun. Comput. Sci., 2014)

Analysis of the CAESAR Candidate Silver. - Jérémy Jean; Yu Sasaki; Lei Wang 031 (SAC, 2015)

The parallel-cut meet-in-the-middle attack. - Ivica Nikolic; Lei Wang 031; Shuang Wu 004 (Cryptogr. Commun., 2015)

Cryptanalysis of HMAC/NMAC-Whirlpool. - Jian Guo 001; Yu Sasaki; Lei Wang 031; Shuang Wu 004 (IACR Cryptol. ePrint Arch., 2015)

Equivalent Key Recovery Attacks against HMAC and NMAC with Whirlpool Reduced to 7 Rounds. - Jian Guo 001; Yu Sasaki; Lei Wang 031; Meiqin Wang; Long Wen 002 (IACR Cryptol. ePrint Arch., 2015)

Known-key Distinguisher on Full PRESENT. - Céline Blondeau; Thomas Peyrin; Lei Wang 031 (IACR Cryptol. ePrint Arch., 2015)

Security Analysis of PRINCE. - Jérémy Jean; Ivica Nikolic; Thomas Peyrin; Lei Wang 031; Shuang Wu 004 (IACR Cryptol. ePrint Arch., 2015)

The Sum Can Be Weaker Than Each Part. - Gaëtan Leurent; Lei Wang 031 (IACR Cryptol. ePrint Arch., 2015)

Cryptanalysis of Round-Reduced LED. - Ivica Nikolic; Lei Wang 031; Shuang Wu 004 (IACR Cryptol. ePrint Arch., 2015)

Bitwise Partial-Sum: A New Tool for Integral Analysis against ARX Designs. - Yu Sasaki; Lei Wang 031 (IEICE Trans. Fundam. Electron. Commun. Comput. Sci., 2015)

Improved Single-Key Distinguisher on HMAC-MD5 and Key Recovery Attacks on Sandwich-MAC-MD5 and MD5-MAC. - Yu Sasaki; Gaoli Wang; Lei Wang 031 (IEICE Trans. Fundam. Electron. Commun. Comput. Sci., 2015)

Replacing SHA-2 with SHA-3 Enhances Generic Security of HMAC. - Yusuke Naito 001; Lei Wang 031 (CT-RSA, 2016)

How to Build Fully Secure Tweakable Blockciphers from Classical Blockciphers. - Lei Wang 031; Jian Guo 001; Guoyan Zhang; Jingyuan Zhao; Dawu Gu (IACR Cryptol. ePrint Arch., 2016)

Practical Forgeries and Distinguishers against PAES. - Jérémy Jean; Ivica Nikolic; Yu Sasaki; Lei Wang 031 (IEICE Trans. Fundam. Electron. Commun. Comput. Sci., 2016)

Generic Internal State Recovery on Strengthened HMAC: n-bit Secure HMAC Requires Key in All Blocks. - Yu Sasaki; Lei Wang 031 (IEICE Trans. Fundam. Electron. Commun. Comput. Sci., 2016)

Message Extension Attack against Authenticated Encryptions: Application to PANDA. - Yu Sasaki; Lei Wang 031 (IEICE Trans. Fundam. Electron. Commun. Comput. Sci., 2016)

Functional Graph Revisited: Updates on (Second) Preimage Attacks on Hash Combiners. - Zhenzhen Bao; Lei Wang 031; Jian Guo 001; Dawu Gu (IACR Cryptol. ePrint Arch., 2017)

Improved Indifferentiability Security Bound for the Prefix-Free Merkle-Damgård Hash Function. - Kamel Ammour; Lei Wang 031 (Inscrypt, 2018)

Length-Preserving Encryption Based on Single-Key Tweakable Block Cipher. - Xiangyang Zhang; Yaobin Shen; Hailun Yan; Ying Zou 008; Ming Wan; Zheyi Wu; Lei Wang 031 (ProvSec, 2018)

Processing Analysis of Confidential Modes of Operation. - Yasir Nawaz; Lei Wang 031; Kamel Ammour (SpaCCS, 2018)

Similar operation template attack on RSA-CRT as a case study. - Sen Xu; Xiangjun Lu; Kaiyu Zhang; Yang Li 022; Lei Wang 031; Weijia Wang 003; Haihua Gu; Zheng Guo 001; Junrong Liu; Dawu Gu (Sci. China Inf. Sci., 2018)

Revisiting Key-alternating Feistel Ciphers for Shorter Keys and Multi-user Security. - Chun Guo 002; Lei Wang 031 (IACR Cryptol. ePrint Arch., 2018)

ISO/IEC 9797-1 Revisited: Beyond Birthday Bound. - Yaobin Shen; Lei Wang 031; Dawu Gu (IACR Cryptol. ePrint Arch., 2018)

Functional Graphs and Their Applications in Generic Attacks on Iterated Hash Constructions. - Zhenzhen Bao; Jian Guo 001; Lei Wang 031 (IACR Trans. Symmetric Cryptol., 2018)

XKX Does Not Preserve Unpredictability. - Ying Zou 008; Xiangyang Zhang; Lei Wang 031 (CSAE, 2019)

New Key Recovery Attack on the MICKEY Family of Stream Ciphers. - Lin Ding 001; Dawu Gu; Lei Wang 031 (FCS, 2019)

Mixing Property Tester: A General Framework for Evaluating the Mixing Properties of Initialization of Stream Ciphers. - Lin Ding 001; Dawu Gu; Lei Wang 031 (iSCI, 2019)

Pseudo random oracle of Merkle-Damgård hash functions revisited. - Kamel Ammour; Lei Wang 031; Dawu Gu (Sci. China Inf. Sci., 2019)

Beyond-birthday secure domain-preserving PRFs from a single permutation. - Chun Guo 002; Yaobin Shen; Lei Wang 031; Dawu Gu (Des. Codes Cryptogr., 2019)

New zero-sum distinguishers on full 24-round Keccak-f using the division property. - Hailun Yan; Xuejia Lai; Lei Wang 031; Yu Yu 001; Yiran Xing (IET Inf. Secur., 2019)

Algebraic Degree Estimation of ACORN v3 Using Numeric Mapping. - Lin Ding 001; Lei Wang 031; Dawu Gu; Chenhui Jin; Jie Guan (Secur. Commun. Networks, 2019)

On Beyond-Birthday-Bound Security: Revisiting the Development of ISO/IEC 9797-1 MACs. - Yaobin Shen; Lei Wang 031 (IACR Trans. Symmetric Cryptol., 2019)

Tweaking Key-Alternating Feistel Block Ciphers. - Hailun Yan; Lei Wang 031; Yaobin Shen; Xuejia Lai (ACNS (1), 2020)

SafePay on Ethereum: A Framework For Detecting Unfair Payments in Smart Contracts. - Yue Li 037; Han Liu 010; Zhiqiang Yang; Qian Ren; Lei Wang 031; Bangdao Chen (ICDCS, 2020)

A New General Method of Searching for Cubes in Cube Attacks. - Lin Ding 001; Lei Wang 031; Dawu Gu; Chenhui Jin; Jie Guan (ICICS, 2020)

Seraph: enabling cross-platform security analysis for EVM and WASM smart contracts. - Zhiqiang Yang; Han Liu 010; Yue Li 037; Huixuan Zheng; Lei Wang 031; Bangdao Chen (ICSE (Companion Volume), 2020)

Protect Your Smart Contract Against Unfair Payment. - Yue Li 037; Han Liu 010; Zhiqiang Yang; Bin Wang; Qian Ren; Lei Wang 031; Bangdao Chen (SRDS, 2020)

When Blockchain Meets SGX: An Overview, Challenges, and Open Issues. - Zijian Bao; Qinghao Wang; Wenbo Shi; Lei Wang 031; Hong Lei 001; Bangdao Chen (IEEE Access, 2020)

Revisiting the Security of DbHtS MACs: Beyond-Birthday-Bound in the Multi-User Setting. - Yaobin Shen; Lei Wang 031; Jian Weng 001 (IACR Cryptol. ePrint Arch., 2020)

Generic Attacks on Hash Combiners. - Zhenzhen Bao; Itai Dinur; Jian Guo 001; Gaëtan Leurent; Lei Wang 031 (J. Cryptol., 2020)

Improved Cloud-Assisted Privacy-Preserving Profile-Matching Scheme in Mobile Social Networks. - Ying Zou 008; Yanting Chai; Sha Shi; Lei Wang 031; Yunfeng Peng; Yuan Ping; Baocang Wang (Secur. Commun. Networks, 2020)

Highly Secure Privacy-Preserving Outsourced k-Means Clustering under Multiple Keys in Cloud Computing. - Ying Zou 008; Zhen Zhao 005; Sha Shi; Lei Wang 031; Yunfeng Peng; Yuan Ping; Baocang Wang (Secur. Commun. Networks, 2020)

Improved Security Bounds for Generalized Feistel Networks. - Yaobin Shen; Chun Guo 002; Lei Wang 031 (IACR Trans. Symmetric Cryptol., 2020)

Revisiting the Security of DbHtS MACs: Beyond-Birthday-Bound in the Multi-user Setting. - Yaobin Shen; Lei Wang 031; Dawu Gu; Jian Weng 001 (CRYPTO (3), 2021)

Improved Guess and Determine attack on the MASHA stream cipher. - Lin Ding 001; Dawu Gu; Lei Wang 031; Chenhui Jin; Jie Guan (Sci. China Inf. Sci., 2021)

Secure key-alternating Feistel ciphers without key schedule. - Yaobin Shen; Hailun Yan; Lei Wang 031; Xuejia Lai (Sci. China Inf. Sci., 2021)

CLOAK: Towards Practical Development and Deployment of Confidential Smart Contracts. - Qian Ren; Han Liu 010; Yue Li 037; Hong Lei 001; Lei Wang 031; Bangdao Chen (CoRR, 2021)

LedMAC: More Efficient Variants of LightMAC. - Yaobin Shen; Lei Wang 031; Dawu Gu (IACR Cryptol. ePrint Arch., 2021)

A real-time related key attack on the WG-16 stream cipher for securing 4G-LTE networks. - Lin Ding 001; Dawu Gu; Lei Wang 031; Chenhui Jin; Jie Guan (J. Inf. Secur. Appl., 2021)

Cloak: Transitioning States on Legacy Blockchains Using Secure and Publicly Verifiable Off-Chain Multi-Party Computation. - Qian Ren; Yingjun Wu; Han Liu 010; Yue Li 037; Anne Victor; Hong Lei 001; Lei Wang 031; Bangdao Chen (ACSAC, 2022)

TENET: Towards Self-sovereign and Fair Multi-party Computation Ecology Empowered by Decentralized TEE Network. - Qian Ren; Yingjun Wu; Yue Li 037; Han Liu 010; Hong Lei 001; Lei Wang 031; Bangdao Chen (CoRR, 2022)

Impossibility of Indifferentiable Iterated Blockciphers from 3 or Less Primitive Calls. - Chun Guo 002; Lei Wang 031; Dongdai Lin (IACR Cryptol. ePrint Arch., 2023)

Forgery Attacks on Several Beyond-Birthday-Bound Secure MACs. - Yaobin Shen; François-Xavier Standaert; Lei Wang 031 (IACR Cryptol. ePrint Arch., 2023)

Rotational-XOR Differential Cryptanalysis and an Automatic Framework for AND-RX Ciphers. - Kai Zhang 026; Xuejia Lai; Lei Wang 031; Jie Guan; Bin Hu 011; Senpeng Wang; Tairong Shi (IEEE Trans. Inf. Theory, 2023)

A revisited security evaluation of Simeck family ciphers against impossible differential cryptanalysis. - Kai Zhang 026; Xuejia Lai; Lei Wang 031; Jie Guan; Bin Hu 011 (Sci. China Inf. Sci., 2023)

Meet-in-the-middle attack with splice-and-cut technique and a general automatic framework. - Kai Zhang 026; Xuejia Lai; Lei Wang 031; Jie Guan; Bin Hu 011; Senpeng Wang; Tairong Shi (Des. Codes Cryptogr., 2023)

Multi-User Security of CCM Authenticated Encryption Mode. - Xiangyang Zhang; Yaobin Shen; Lei Wang 031 (CCS, 2024)

Security Analysis of CMAC in the Multi-user Model. - Xiangyang Zhang; Yaobin Shen; Lei Wang 031 (ISC (1), 2024)

DeCloak: Enable Secure and Cheap Multi-Party Transactions on Legacy Blockchains by a Minimally Trusted TEE Network. - Qian Ren; Yue Li 037; Yingjun Wu; Yuchen Wu; Hong Lei 001; Lei Wang 031; Bangdao Chen (IEEE Trans. Inf. Forensics Secur., 2024)

Real-Time Related-Key Attack on Full-Round Shadow Designed for IoT Nodes. - Kai Zhang 026; Xuejia Lai; Lei Wang 031; Jie Guan; Bin Hu 011; Senpeng Wang; Tairong Shi (IEEE Trans. Computers, 2024)

Impossible Differential Cryptanalysis and a Security Evaluation Framework for AND-RX Ciphers. - Kai Zhang 026; Senpeng Wang; Xuejia Lai; Lei Wang 031; Jie Guan; Bin Hu 011; Tairong Shi (IEEE Trans. Inf. Theory, 2024)

Security Analysis of NIST Key Derivation Using Pseudorandom Functions. - Yaobin Shen; Lei Wang 031; Dawu Gu (IACR Cryptol. ePrint Arch., 2025)