| PRINCE – A Low-Latency Block Cipher for Pervasive Computing Applications J Borghoff, A Canteaut, T Güneysu, EB Kavun, M Knezevic, LR Knudsen, ... International conference on the theory and application of cryptology and …, 2012 | 896 | 2012 |
| Biclique Cryptanalysis of the Full AES A Bogdanov, D Khovratovich, C Rechberger ASIACRYPT'11, 2011 | 726 | 2011 |
| Threshold implementations against side-channel attacks and glitches S Nikova, C Rechberger, V Rijmen International conference on information and communications security, 529-545, 2006 | 466 | 2006 |
| Grøstl–a SHA-3 candidate P Gauravaram, LR Knudsen, K Matusiewicz, F Mendel, C Rechberger, ... Submission to NIST, 2008 | 369* | 2008 |
| Finding SHA-1 characteristics: General results and applications CD Cannière, C Rechberger International Conference on the Theory and Application of Cryptology and …, 2006 | 342 | 2006 |
| Ciphers for MPC and FHE MR Albrecht, C Rechberger, T Schneider, T Tiessen, M Zohner Annual International Conference on the Theory and Applications of …, 2015 | 330 | 2015 |
| A case against currently used hash functions in RFID protocols M Feldhofer, C Rechberger On the move to meaningful internet systems 2006: OTM 2006 workshops, 372-381, 2006 | 283 | 2006 |
| Practical template attacks C Rechberger, E Oswald International Workshop on Information Security Applications, 440-456, 2004 | 265 | 2004 |
| The rebound attack: Cryptanalysis of reduced Whirlpool and Grøstl F Mendel, C Rechberger, M Schläffer, S Thomsen Fast Software Encryption, 260-276, 2009 | 259 | 2009 |
| Post-quantum zero-knowledge and signatures from symmetric-key primitives M Chase, D Derler, S Goldfeder, C Orlandi, S Ramacher, C Rechberger, ... Proceedings of the 2017 acm sigsac conference on computer and communications …, 2017 | 251 | 2017 |
| Bicliques for preimages: attacks on Skein-512 and the SHA-2 family D Khovratovich, C Rechberger, A Savelieva | 190 | 2011 |
| MiMC: Efficient encryption and cryptographic hashing with minimal multiplicative complexity M Albrecht, L Grassi, C Rechberger, A Roy, T Tiessen International Conference on the Theory and Application of Cryptology and …, 2016 | 184 | 2016 |
| New features of Latin dances: analysis of Salsa, ChaCha, and Rumba JP Aumasson, S Fischer, S Khazaei, W Meier, C Rechberger Fast Software Encryption, 470-488, 2008 | 168 | 2008 |
| New Features of Latin Dances: Analysis of Salsa, ChaCha, and Rumba, Fast Software Encryption: 15th International Workshop, FSE 2008, Lausanne, Switzerland, February 10-13, 2008 … JP Aumasson, S Fischer, S Khazaei, W Meier, C Rechberger Springer-Verlag, Berlin, Heidelberg, 2008 | 155 | 2008 |
| A 3-subset meet-in-the-middle attack: cryptanalysis of the lightweight block cipher KTANTAN A Bogdanov, C Rechberger International Workshop on Selected Areas in Cryptography, 229-240, 2010 | 151 | 2010 |
| Rebound distinguishers: Results on the full Whirlpool compression function M Lamberger, F Mendel, C Rechberger, V Rijmen, M Schläffer International Conference on the Theory and Application of Cryptology and …, 2009 | 143 | 2009 |
| Poseidon: A new hash function for zero-knowledge proof systems L Grassi, D Khovratovich, C Rechberger, A Roy, M Schofnegger 30th {USENIX} Security Symposium ({USENIX} Security 21), 2021 | 132 | 2021 |
| Advanced meet-in-the-middle preimage attacks: First results on full Tiger, and improved results on MD4 and SHA-2 J Guo, S Ling, C Rechberger, H Wang International Conference on the Theory and Application of Cryptology and …, 2010 | 123 | 2010 |
| ECRYPT II yearly report on algorithms and keysizes (2011–2012) N Smart, S Babbage, D Catalano, C Cid, B Weger, O Dunkelman, M Ward European network of excellence in cryptology (ECRYPT II), 2012 | 119* | 2012 |
| Collisions for 70-step SHA-1: on the full cost of collision search C De Canniere, F Mendel, C Rechberger Selected Areas in Cryptography, 56-73, 2007 | 103* | 2007 |
