On Families of Hash Functions via Geometric Codes and Concatenation. - Jürgen Bierbrauer; Thomas Johansson 001; Gregory Kabatianskii; Ben J. M. Smeets (CRYPTO, 1993)

On the Construction of Perfect Authentication Codes that Permit Arbitration. - Thomas Johansson 001 (CRYPTO, 1993)

On the Relation between A-Codes and Codes Correcting Independent Errors. - Thomas Johansson 001; Gregory Kabatianskii; Ben J. M. Smeets (EUROCRYPT, 1993)

On A²-Codes Including Arbiter's Attacks. - Thomas Johansson 001; Ben J. M. Smeets (EUROCRYPT, 1994)

Parallel algorithms on compact binary objects. - Thomas Johansson 001; Ewert Bengtsson (ICPR (3), 1994)

A New Parallel MIMD Connected Component Labeling Algorithm. - Thomas Johansson 001; Ewert Bengtsson (PARLE, 1994)

A Shift Register Construction of Unconditionally Secure Authentication Codes. - Thomas Johansson 001 (Des. Codes Cryptogr., 1994)

Lower bounds on the probability of deception in authentication with arbitration. - Thomas Johansson 001 (IEEE Trans. Inf. Theory, 1994)

Authentication Codes for Nontrusting Parties Obtained from Rank Metric Codes. - Thomas Johansson 001 (Des. Codes Cryptogr., 1995)

Universal Hash Functions from Exponential Sums over Finite Fields and Galois Rings. - Tor Helleseth; Thomas Johansson 001 (CRYPTO, 1996)

On the cardinality of systematic authentication codes via error-correcting codes. - Gregory Kabatianskii; Ben J. M. Smeets; Thomas Johansson 001 (IEEE Trans. Inf. Theory, 1996)

Bucket Hashing with a Small Key Size. - Thomas Johansson 001 (EUROCRYPT, 1997)

Almost k-wise Independent Sample Spaces and Their Cryptologic Applications. - Kaoru Kurosawa; Thomas Johansson 001; Douglas R. Stinson (EUROCRYPT, 1997)

Reduced Complexity Correlation Attacks on Two Clock-Controlled Generators. - Thomas Johansson 001 (ASIACRYPT, 1998)

A Simple One-Sweep Algorithm for Optimal APP Symbol Decoding of Linear Block Codes. - Thomas Johansson 001; Kamil Sh. Zigangirov (IEEE Trans. Inf. Theory, 1998)

Fast Correlation Attacks Based on Turbo Code Techniques. - Thomas Johansson 001; Fredrik Jönsson (CRYPTO, 1999)

Improved Fast Correlation Attacks on Stream Ciphers via Convolutional Codes. - Thomas Johansson 001; Fredrik Jönsson (EUROCRYPT, 1999)

Further Results on the Relation Between Nonlinearity and Resiliency for Boolean Functions. - Enes Pasalic; Thomas Johansson 001 (IMACC, 1999)

Further Results on Asymmetric Authentication Schemes. - Thomas Johansson 001 (Inf. Comput., 1999)

Fast Correlation Attacks through Reconstruction of Linear Polynomials. - Thomas Johansson 001; Fredrik Jönsson (CRYPTO, 2000)

A Simple Algorithm for Fast Correlation Attacks on Stream Ciphers. - Vladimir V. Chepyzhov; Thomas Johansson 001; Ben J. M. Smeets (FSE, 2000)

A Construction of Resilient Functions with High Nonlinearity. - Thomas Johansson 001; Enes Pasalic (IACR Cryptol. ePrint Arch., 2000)

New Constructions of Resilent and Correlation Immune Boolean Functions achieving Upper Bounds on Nonlinearity. - Enes Pasalic; Thomas Johansson 001; Subhamoy Maitra; Palash Sarkar 001 (IACR Cryptol. ePrint Arch., 2000)

New Constructions of Resilient and Correlation Immune Boolean Functions Achieving Upper Bound on Nonlinearity. - Emir Pasalic; Subhamoy Maitra; Thomas Johansson 001; Palash Sarkar 001 (Electron. Notes Discret. Math., 2001)

Distinguishing Attacks on SOBER-t16 and t32. - Patrik Ekdahl; Thomas Johansson 001 (FSE, 2002)

Construction of Cryptographically Important Boolean Functions. - Soumen Maity; Thomas Johansson 001 (INDOCRYPT, 2002)

A New Version of the Stream Cipher SNOW. - Patrik Ekdahl; Thomas Johansson 001 (Selected Areas in Cryptography, 2002)

A fast correlation attack on LILI-128. - Fredrik Jönsson; Thomas Johansson 001 (Inf. Process. Lett., 2002)

New Technique for Decoding Codes in the Rank Metric and Its Cryptography Applications. - Alexei V. Ourivski; Thomas Johansson 001 (Probl. Inf. Transm., 2002)

Theoretical analysis of a correlation attack based on convolutional codes. - Thomas Johansson 001; Fredrik Jönsson (IEEE Trans. Inf. Theory, 2002)

On the complexity of some cryptographic problems based on the general decoding problem. - Thomas Johansson 001; Fredrik Jönsson (IEEE Trans. Inf. Theory, 2002)

Predicting the Shrinking Generator with Fixed Connections. - Patrik Ekdahl; Willi Meier; Thomas Johansson 001 (EUROCRYPT, 2003)

Analysis and Design of Modern Stream Ciphers: (Invited Paper) p. - Thomas Johansson 001 (IMACC, 2003)

Another attack on A5/1. - Patrik Ekdahl; Thomas Johansson 001 (IEEE Trans. Inf. Theory, 2003)

Correlation Attacks Using a New Class of Weak Feedback Polynomials. - Håkan Englund; Martin Hell; Thomas Johansson 001 (FSE, 2004)

A New Simple Technique to Attack Filter Generators and Related Ciphers. - Håkan Englund; Thomas Johansson 001 (Selected Areas in Cryptography, 2004)

An Improved Correlation Attack on A5/1. - Alexander Maximov; Thomas Johansson 001; Steve Babbage (Selected Areas in Cryptography, 2004)

A memory-efficient optimal APP symbol-decoding algorithm for linear block codes. - A. Trofimov; Thomas Johansson 001 (IEEE Trans. Commun., 2004)

Fast Computation of Large Distributions and Its Cryptographic Applications. - Alexander Maximov; Thomas Johansson 001 (ASIACRYPT, 2005)

Snow 2.0 IP Core for Trusted Hardware. - Wenhai Fang; Thomas Johansson 001; Lambert Spaanenburg (FPL, 2005)

A New Distinguisher for Clock Controlled Stream Ciphers. - Håkan Englund; Thomas Johansson 001 (FSE, 2005)

Some Attacks on the Bit-Search Generator. - Martin Hell; Thomas Johansson 001 (FSE, 2005)

Cryptanalysis of Achterbahn. - Thomas Johansson 001; Willi Meier; Frédéric Muller (FSE, 2006)

A Stream Cipher Proposal: Grain-128. - Martin Hell; Thomas Johansson 001; Alexander Maximov; Willi Meier (ISIT, 2006)

Cryptanalysis of Achterbahn-Version 2. - Martin Hell; Thomas Johansson 001 (Selected Areas in Cryptography, 2006)

On the Problem of Finding Linear Approximations and Cryptanalysis of Pomaranch Version 2. - Martin Hell; Thomas Johansson 001 (Selected Areas in Cryptography, 2006)

Three ways to mount distinguishing attacks on irregularly clocked stream ciphers. - Håkan Englund; Thomas Johansson 001 (Int. J. Secur. Networks, 2006)

Two New Attacks on the Self-Shrinking Generator. - Martin Hell; Thomas Johansson 001 (IEEE Trans. Inf. Theory, 2006)

A Key Recovery Attack on Edon80. - Martin Hell; Thomas Johansson 001 (ASIACRYPT, 2007)

Two General Attacks on Pomaranch-Like Keystream Generators. - Håkan Englund; Martin Hell; Thomas Johansson 001 (FSE, 2007)

A Framework for Chosen IV Statistical Analysis of Stream Ciphers. - Håkan Englund; Thomas Johansson 001; Meltem Sönmez Turan (INDOCRYPT, 2007)

A Note on Distinguishing Attacks. - Håkan Englund; Martin Hell; Thomas Johansson 001 (ITW, 2007)

Cryptanalysis of Achterbahn-128/80. - Martin Hell; Thomas Johansson 001 (IET Inf. Secur., 2007)

Grain: a stream cipher for constrained environments. - Martin Hell; Thomas Johansson 001; Willi Meier (Int. J. Wirel. Mob. Comput., 2007)

A Linear Distinguishing Attack on Scream. - Alexander Maximov; Thomas Johansson 001 (IEEE Trans. Inf. Theory, 2007)

Breaking the F-FCSR-H Stream Cipher in Real Time. - Martin Hell; Thomas Johansson 001 (ASIACRYPT, 2008)

The Grain Family of Stream Ciphers. - Martin Hell; Thomas Johansson 001; Alexander Maximov; Willi Meier (The eSTREAM Finalists, 2008)

Improving the Rainbow Attack by Reusing Colours. - Martin Ågren; Thomas Johansson 001; Martin Hell (CANS, 2009)

An Efficient State Recovery Attack on X-FCSR-256. - Paul Stankovski; Martin Hell; Thomas Johansson 001 (FSE, 2009)

An overview of distinguishing attacks on stream ciphers. - Martin Hell; Thomas Johansson 001; Lennart Brynielsson (Cryptogr. Commun., 2009)

A Note on Fast Algebraic Attacks and Higher Order Nonlinearities. - Qichun Wang; Thomas Johansson 001 (Inscrypt, 2010)

On Equivalence Classes of Boolean Functions. - Qichun Wang; Thomas Johansson 001 (ICISC, 2010)

Linear Cryptanalysis of PRINTcipher - Trails and Samples Everywhere. - Martin Ågren; Thomas Johansson 001 (INDOCRYPT, 2011)

Grain-128a: a new version of Grain-128 with optional authentication. - Martin Ågren; Martin Hell; Thomas Johansson 001; Willi Meier (Int. J. Wirel. Mob. Comput., 2011)

Breaking the Stream Ciphers F-FCSR-H and F-FCSR-16 in Real Time. - Martin Hell; Thomas Johansson 001 (J. Cryptol., 2011)

Analysis of Xorrotation with Application to an HC-128 Variant. - Paul Stankovski; Martin Hell; Thomas Johansson 001 (ACISP, 2012)

A New Version of McEliece PKC Based on Convolutional Codes. - Carl Löndahl; Thomas Johansson 001 (ICICS, 2012)

Improved message passing techniques in fast correlation attacks on stream ciphers. - Martin Ågren; Martin Hell; Thomas Johansson 001; Carl Löndahl (ISTC, 2012)

Privacy, Security and Trust in Cloud Computing: The Perspective of the Telecommunication Industry. - Leonardo A. Martucci; Albin Zuccato; Ben J. M. Smeets; Sheikh Mahbub Habib; Thomas Johansson 001; Nahid Shahmehri (UIC/ATC, 2012)

A survey on fast correlation attacks. - Martin Ågren; Carl Löndahl; Martin Hell; Thomas Johansson 001 (Cryptogr. Commun., 2012)

Improved distinguishers for HC-128. - Paul Stankovski; Sushmita Ruj; Martin Hell; Thomas Johansson 001 (Des. Codes Cryptogr., 2012)

On hardware-oriented message authentication. - Martin Ågren; Martin Hell; Thomas Johansson 001 (IET Inf. Secur., 2012)

Some results on fast algebraic attacks and higher-order non-linearities. - Qichun Wang; Thomas Johansson 001; Haibin Kan (IET Inf. Secur., 2012)

Improved Distinguishers on Stream Ciphers With Certain Weak Feedback Polynomials. - Martin Hell; Thomas Johansson 001; Lennart Brynielsson; Håkan Englund (IEEE Trans. Inf. Theory, 2012)

Improved Key Recovery Attack on the BEAN Stream Cipher. - Hui Wang; Martin Hell; Thomas Johansson 001; Martin Ågren (IEICE Trans. Fundam. Electron. Commun. Comput. Sci., 2013)

Solving LPN Using Covering Codes. - Qian Guo 001; Thomas Johansson 001; Carl Löndahl (ASIACRYPT (1), 2014)

Improved algorithms for finding low-weight polynomial multiples in F2[x] and some cryptographic applications. - Carl Löndahl; Thomas Johansson 001 (Des. Codes Cryptogr., 2014)

An Efficient State Recovery Attack on the X-FCSR Family of Stream Ciphers. - Paul Stankovski; Martin Hell; Thomas Johansson 001 (J. Cryptol., 2014)

Coded-BKW: Solving LWE Using Lattice Codes. - Qian Guo 001; Thomas Johansson 001; Paul Stankovski (CRYPTO (1), 2015)

A generalized birthday approach for efficiently finding linear relations in ℓ-sequences. - Hui Wang; Paul Stankovski; Thomas Johansson 001 (Des. Codes Cryptogr., 2015)

A New Algorithm for Solving Ring-LPN With a Reducible Polynomial. - Qian Guo 001; Thomas Johansson 001; Carl Löndahl (IEEE Trans. Inf. Theory, 2015)

A Key Recovery Attack on MDPC with CCA Security Using Decoding Errors. - Qian Guo 001; Thomas Johansson 001; Paul Stankovski (ASIACRYPT (1), 2016)

A p-ary MDPC scheme. - Qian Guo 001; Thomas Johansson 001 (ISIT, 2016)

Squaring attacks on McEliece public-key cryptosystems using quasi-cyclic codes of even dimension. - Carl Löndahl; Thomas Johansson 001; Masoumeh Koochak Shooshtari; Mahmoud Ahmadian-Attari; Mohammad Reza Aref (Des. Codes Cryptogr., 2016)

Cryptanalysis of McEliece cryptosystem variants based on quasi-cyclic low-density parity check codes. - Masoumeh Koochak Shooshtari; Mahmoud Ahmadian-Attari; Thomas Johansson 001; Mohammad Reza Aref (IET Inf. Secur., 2016)

Coded-BKW with Sieving. - Qian Guo 001; Thomas Johansson 001; Erik Mårtensson; Paul Stankovski (ASIACRYPT (1), 2017)

Information set decoding with soft information and some cryptographic applications. - Qian Guo 001; Thomas Johansson 001; Erik Mårtensson; Paul Stankovski (ISIT, 2017)

A Reaction Attack on the QC-LDPC McEliece Cryptosystem. - Tomás Fabsic; Viliam Hromada; Paul Stankovski; Pavol Zajac; Qian Guo 001; Thomas Johansson 001 (PQCrypto, 2017)

Editorial: Special issue on coding and cryptography. - Pascale Charpin; Thomas Johansson 001; Gohar M. Kyureghyan; Nicolas Sendrier; Jean-Pierre Tillich (Des. Codes Cryptogr., 2017)

Ouroboros-E: An Efficient Lattice-based Key-Exchange Protocol. - Jean-Christophe Deneuville; Philippe Gaborit; Qian Guo 001; Thomas Johansson 001 (ISIT, 2018)

A new SNOW stream cipher called SNOW-V. - Patrik Ekdahl; Thomas Johansson 001; Alexander Maximov; Jing Yang 025 (IACR Cryptol. ePrint Arch., 2018)

Error Amplification in Code-based Cryptography. - Alexander Nilsson; Thomas Johansson 001; Paul Stankovski (IACR Cryptol. ePrint Arch., 2018)

A Novel CCA Attack Using Decryption Errors Against LAC. - Qian Guo 001; Thomas Johansson 001; Jing Yang 025 (ASIACRYPT (1), 2019)

An AEAD Variant of the Grain Stream Cipher. - Martin Hell; Thomas Johansson 001; Willi Meier; Jonathan Sönnerup; Hirotaka Yoshida (C2SI, 2019)

Improved iterative decoding of QC-MDPC codes in the McEliece public key cryptosystem. - Irina E. Bocharova; Thomas Johansson 001; Boris D. Kudryashov (ISIT, 2019)

Decryption Failure Attacks on IND-CCA Secure Lattice-Based Schemes. - Jan-Pieter D'Anvers; Qian Guo 001; Thomas Johansson 001; Alexander Nilsson; Frederik Vercauteren; Ingrid Verbauwhede (Public Key Cryptography (2), 2019)

Some cryptanalytic and coding-theoretic applications of a soft stern algorithm. - Qian Guo 001; Thomas Johansson 001; Erik Mårtensson; Paul Stankovski Wagner (Adv. Math. Commun., 2019)

Editorial: Special issue on coding and cryptography. - Faina I. Solov'eva; Daniel Augot; Thomas Johansson 001; Marine Minier; Victor A. Zinoviev (Des. Codes Cryptogr., 2019)

On the Asymptotics of Solving the LWE Problem Using Coded-BKW with Sieving. - Qian Guo 001; Thomas Johansson 001; Erik Mårtensson; Paul Stankovski Wagner (IACR Cryptol. ePrint Arch., 2019)

A Generic Attack on Lattice-based Schemes using Decryption Errors with Application to ss-ntru-pke. - Qian Guo 001; Thomas Johansson 001; Alexander Nilsson (IACR Cryptol. ePrint Arch., 2019)

Spectral analysis of ZUC-256. - Jing Yang 025; Thomas Johansson 001; Alexander Maximov (IACR Cryptol. ePrint Arch., 2019)

Vectorized linear approximations for attacks on SNOW 3G. - Jing Yang 025; Thomas Johansson 001; Alexander Maximov (IACR Cryptol. ePrint Arch., 2019)

A new birthday-type algorithm for attacking the fresh re-keying countermeasure. - Qian Guo 001; Thomas Johansson 001 (Inf. Process. Lett., 2019)

A Key Recovery Reaction Attack on QC-MDPC. - Qian Guo 001; Thomas Johansson 001; Paul Stankovski Wagner (IEEE Trans. Inf. Theory, 2019)

A New Decryption Failure Attack Against HQC. - Qian Guo 001; Thomas Johansson 001 (ASIACRYPT (1), 2020)

A Key-Recovery Timing Attack on Post-quantum Primitives Using the Fujisaki-Okamoto Transformation and Its Application on FrodoKEM. - Qian Guo 001; Thomas Johansson 001; Alexander Nilsson (CRYPTO (2), 2020)

Making the BKW Algorithm Practical for LWE. - Alessandro Budroni; Qian Guo 001; Thomas Johansson 001; Erik Mårtensson; Paul Stankovski Wagner (INDOCRYPT, 2020)

An overview of cryptographic primitives for possible use in 5G and beyond. - Jing Yang 025; Thomas Johansson 001 (Sci. China Inf. Sci., 2020)

Faster Dual Lattice Attacks for Solving LWE with Applications to CRYSTALS. - Qian Guo 001; Thomas Johansson 001 (ASIACRYPT (4), 2021)

Grain-128AEADv2: Strengthening the Initialization Against Key Reconstruction. - Martin Hell; Thomas Johansson 001; Alexander Maximov; Willi Meier; Hirotaka Yoshida (CANS, 2021)

Breaking Masked and Shuffled CCA Secure Saber KEM by Power Analysis. - Kalle Ngo; Elena Dubrova; Thomas Johansson 001 (ASHES@CCS, 2021)

A Weighted Bit Flipping Decoder for QC-MDPC-based Cryptosystems. - Alexander Nilsson; Irina E. Bocharova; Boris D. Kudryashov; Thomas Johansson 001 (ISIT, 2021)

SNOW-Vi: an extreme performance variant of SNOW-V for lower grade CPUs. - Patrik Ekdahl; Alexander Maximov; Thomas Johansson 001; Jing Yang 025 (WISEC, 2021)

Improvements on Making BKW Practical for Solving LWE. - Alessandro Budroni; Qian Guo 001; Thomas Johansson 001; Erik Mårtensson; Paul Stankovski Wagner (Cryptogr., 2021)

SNOW-Vi: an extreme performance variant of SNOW-V for low-end CPUs. - Patrik Ekdahl; Thomas Johansson 001; Alexander Maximov; Jing Yang 025 (IACR Cryptol. ePrint Arch., 2021)

A Side-Channel Attack on a Masked IND-CCA Secure Saber KEM. - Kalle Ngo; Elena Dubrova; Qian Guo 001; Thomas Johansson 001 (IACR Cryptol. ePrint Arch., 2021)

New improved attacks on SNOW-V. - Jing Yang 025; Thomas Johansson 001; Alexander Maximov (IACR Cryptol. ePrint Arch., 2021)

A Side-Channel Attack on a Masked IND-CCA Secure Saber KEM Implementation. - Kalle Ngo; Elena Dubrova; Qian Guo 001; Thomas Johansson 001 (IACR Trans. Cryptogr. Hardw. Embed. Syst., 2021)

Improved guess-and-determine and distinguishing attacks on SNOW-V. - Jing Yang 025; Thomas Johansson 001; Alexander Maximov (IACR Trans. Symmetric Cryptol., 2021)

A Key-Recovery Side-Channel Attack on Classic McEliece. - Qian Guo 001; Andreas Johansson; Thomas Johansson 001 (IACR Cryptol. ePrint Arch., 2022)

Attacks on the Firekite cipher. - Thomas Johansson 001; Willi Meier; Vu Nguyen (IACR Cryptol. ePrint Arch., 2022)

Don't Reject This: Key-Recovery Timing Attacks Due to Rejection-Sampling in HQC and BIKE. - Qian Guo 001; Clemens Hlauschek; Thomas Johansson 001; Norman Lahr; Alexander Nilsson; Robin Leander Schröder (IACR Trans. Cryptogr. Hardw. Embed. Syst., 2022)

A Key-Recovery Side-Channel Attack on Classic McEliece Implementations. - Qian Guo 001; Andreas Johansson; Thomas Johansson 001 (IACR Trans. Cryptogr. Hardw. Embed. Syst., 2022)

Revisiting the Concrete Security of Goldreich's Pseudorandom Generator. - Jing Yang 025; Qian Guo 001; Thomas Johansson 001; Michael Lentmaier (IEEE Trans. Inf. Theory, 2022)

SCA-LDPC: A Code-Based Framework for Key-Recovery Side-Channel Attacks on Post-quantum Encryption Schemes. - Qian Guo 001; Denis Nabokov; Alexander Nilsson; Thomas Johansson 001 (ASIACRYPT (4), 2023)

Differential cryptanalysis of Mod-2/Mod-3 constructions of binary weak PRFs. - Thomas Johansson 001; Willi Meier; Vu Nguyen (ISIT, 2023)

A New Sieving-Style Information-Set Decoding Algorithm. - Qian Guo 001; Thomas Johansson 001; Vu Nguyen (IACR Cryptol. ePrint Arch., 2023)

Cache-timing attack against HQC. - Senyang Huang; Rui Qi Sim; Chitchanok Chuengsatiansup; Qian Guo 001; Thomas Johansson 001 (IACR Cryptol. ePrint Arch., 2023)

A side-channel attack on a masked and shuffled software implementation of Saber. - Kalle Ngo; Elena Dubrova; Thomas Johansson 001 (J. Cryptogr. Eng., 2023)

Formal Analysis of Julia Key Agreement Protocol. - Navya Sivaraman; Simin Nadjm-Tehrani; Thomas Johansson 001 (ICICS (2), 2024)

A Key-Recovery Attack on the LCMQ Authentication Protocol. - Vu Nguyen; Thomas Johansson 001; Qian Guo 001 (ISIT, 2024)

Key Recovery Attacks on Approximate Homomorphic Encryption with Non-Worst-Case Noise Flooding Countermeasures. - Qian Guo 001; Denis Nabokov; Elias Suvanto; Thomas Johansson 001 (USENIX Security Symposium, 2024)

A new stand-alone MAC construct called SMAC. - Dachao Wang; Alexander Maximov; Patrik Ekdahl; Thomas Johansson 001 (IACR Cryptol. ePrint Arch., 2024)

Efficient Authentication Protocols from the Restricted Syndrome Decoding Problem. - Thomas Johansson 001; Mustafa Khairallah; Vu Nguyen (EuroS&P, 2025)

Correction Fault Attack on CROSS under Unknown Bit Flips. - Sönke Jendral; Elena Dubrova; Qian Guo 001; Thomas Johansson 001 (IACR Cryptol. ePrint Arch., 2025)