| 1 | 2013 | FSE | pc |
| year | title | booktitle | pages | |
|---|---|---|---|---|
| 1 | 2010 | Quark: A Lightweight Hash | ches | 1-15 |
| 2 | 2010 | Differential and invertibility properties of BLAKE (full version) | eprint | online |
| 3 | 2010 | Distinguishers for the Compression Function and Output Transformation of Hamsi-256 | eprint | online |
| 4 | 2010 | Differential and Invertibility Properties of BLAKE | fse | 318-332 |
| 5 | 2010 | Cryptanalysis of ESSENCE | fse | 134-152 |
| 6 | 2009 | Improved Cryptanalysis of Skein | asiacrypt | 542-559 |
| 7 | 2009 | Cube Testers and Key Recovery Attacks on Reduced-Round MD6 and Trivium | fse | 1-22 |
| 8 | 2009 | Cryptanalysis of the ISDB Scrambling Algorithm (MULTI2) | fse | 296-307 |
| 9 | 2008 | The Hash Function Family LAKE | fse | 36-53 |
| 10 | 2008 | New Features of Latin Dances: Analysis of Salsa, ChaCha, and Rumba | fse | online |
| 11 | 2008 | Preimage Attacks on 3-Pass HAVAL and Step-Reduced MD5 | eprint | online |
| 12 | 2008 | Inside the Hypercube | eprint | online |
| 13 | 2007 | New Features of Latin Dances: Analysis of Salsa, ChaCha, and Rumba | eprint | online |
| 14 | 2006 | On the cost of cryptanalytic attacks | eprint | online |
| 15 | 2006 | On the pseudo-random generator ISAAC | eprint | online |