, US Department of Commerce, Washington DC, November 26, 2001.
[10] E. Fujisaki, T. Okamoto, D. Pointcheval, J. Stern, "RSA-OAEP is secure under the RSA assumption," Advances in Cryptology, Proceedings Crypto 01, LNCS 2139 , J. Kilian, Ed., Springer-Verlag, 2001, pp. 260-274. p> [11] L.K. Grover, "A fast quantum mechanical algorithm for database search," Proc. 28 th Annual ACM Symposium on Theory of Computing, 1996, pp. 212-219. p> [12] B. Kaliski, "On hash function firewalls in signature schemes," Topics in Cryptology, CT-RSA 2002, LNCS 2271 , B. Preneel, Ed., Springer-Verlag, 2002, pp. 1-16. p> [13] P. Kocher, "Timing attacks on implementations of Diffie-Hellman, RSA, DSS, and other systems," Advances in Cryptology, Proceedings Crypto 96, LNCS 1109 , N. Koblitz, Ed., Springer-Verlag, 1996, pp. 104-113. p> [14] P. Kocher, J. Jaffe, B. Jun, "Differential power analysis," Advances in Cryptology, Proceedings Crypto 99, LNCS 1666 , MJ Wiener, Ed., Springer-Verlag, 1999, pp. 388 - 397. p> [15] B.-J. Koops, "Crypto law survey," [16] J. Manger, "A chosen ciphertext attack on RSA Optimal Asymmetric Encryption Padding (OAEP) as standardized in PKCS # 1 v2.0," Advances in Cryptology, Proceedings Crypto 01, LNCS 2139 , J. Kilian, Ed., Springer-Verlag, 2001, pp. 230-238. p> [17] M. Matsui, "The first experimental cryptanalysis of the Data Encryption Standard," Advances in Cryptology, Proceedings Crypto 94, LNCS 839 , Y. Desmedt, Ed., Springer-Verlag, 1994, pp. 1-11. p> [18] A.J. Menezes, P.C. van Oorschot, S.A. Vanstone, "Handbook of Applied Cryptography," CRC Press, 1997. p> [19] NESSIE,
[20] NIST, AES Initiative,
[21] NIST, "SHA-256, SHA-384, SHA-512," Washington DC: NIST, US Department of Commerce, Draft, 2000.
[22] B. Preneel, B. Van Rompay, L. Granboulan, G. Martinet, S. Murphy, R. Shipsey, J. White, M. Dichtl, P. Serf, M. Schafheutle, E. Biham, O. Dunkelman, V. Furman, M. Ciet, J.-J. Quisquater, F. Sica, L. Knudsen, H. Raddum, "NESSIE Phase I: Selection of Primitives" NESSIE Report, September 2001, available from [19]. p> [23] B. Preneel, S.B. ВЁ Ors, A. Biryukov, L. Granboulan, E. Dottax, S. Murphy, A. Dent, J. White, M. Dichtl, S. Pyka, P. Serf, E. Biham, E. Barkan, O. Dunkelman, M. Ciet, F. Sica, L.R. Knudsen, H. Raddum "Update on the selection of algorithms for further investigation during the second round," NESSIE Deliverable D18, March 2002, available from [19]. p> [24] B. Preneel, A. Biryukov, E. Oswald, B. Van Rompay, L. Granboulan, E. Dottax, S. Murphy, A. Dent, J. White, M. Dichtl, S. Pyka, M. Schafheutle, P. Serf, E. Biham, E. Barkan, O. Dunkelman, M. Ciet, F. Sica, L. Knudsen, M. Parker, H. Raddu...
