| 1 | 2013 | Eurocrypt | pc |
| year | title | booktitle | pages | |
|---|---|---|---|---|
| 1 | 2012 | A Dichotomy for Local Small-Bias Generators | tcc | 600-617 |
| 2 | 2012 | Key-Alternating Ciphers in a Provable Setting: Encryption Using a Small Number of Public Permutations - (Extended Abstract) | eurocrypt | 45-62 |
| 3 | 2011 | spongent: A Lightweight Hash Function | ches | 312-325 |
| 4 | 2011 | Biclique Cryptanalysis of the Full AES | asiacrypt | 344-371 |
| 5 | 2011 | Input Locality and Hardness Amplification | tcc | 1 |
| 6 | 2008 | Time-Area Optimized Public-Key Engines: MQ-Cryptosystems as Replacement for Elliptic Curves? | eprint | online |
| 7 | 2008 | Hash Functions and RFID Tags: Mind the Gap | ches | 283-299 |
| 8 | 2008 | Time-Area Optimized Public-Key Engines: -Cryptosystems as Replacement for Elliptic Curves? | ches | 45-61 |
| 9 | 2008 | Multiple-Differential Side-Channel Collision Attacks on AES | ches | 30-44 |
| 10 | 2007 | Cryptanalysis of the KeeLoq block cipher | eprint | online |
| 11 | 2007 | Collision Attacks on AES-Based MAC: Alpha-MAC | ches | 166-180 |
| 12 | 2007 | PRESENT: An Ultra-Lightweight Block Cipher | ches | 450-466 |
| 13 | 2007 | A Hardware-Assisted Realtime Attack on A5/2 Without Precomputations | ches | 394-412 |