Stefan Kölbl
  • Bio
  • Blog
  • Papers
  • Talks
  • Experience
  • Projects
  • Tools
ESC

Searching...

No results found

↑↓ Navigate ↵ Select
Powered by Hugo Blox
  • Tools
    • Grover Cost Calculator
    • S-box Analyzer
  • Blog
    • Google's commitment to a quantum-safe future: Why PQC is Google's path forward and not QKD
    • From Inventory to Agility: A CISO's Guide to Robust Key Management
    • Cryptographic Agility and Key Rotation
    • Why Hybrid Deployments Are Key to Secure PQC Migration
    • Google's Threat model for Post-Quantum Cryptography
    • Why Google now uses post-quantum cryptography for internal comms
  • Projects
    • SPHINCS+ / SLH-DSA
    • Skinny
    • CryptoSMT
    • Gimli
    • Haraka
    • Pyjamask
  • Experience
  • Publications
    • How to Abuse and Fix Authenticated Encryption Without Key Commitment
    • The SPHINCS+ Signature Framework
    • ShiftRows Alternatives for AES-like Ciphers and Optimal Cell Permutations for Midori and Skinny
    • Mind the Gap - A Closer Look at the Security of Block Ciphers against Differential Cryptanalysis
    • Finding Integral Distinguishers with Ease
    • Putting Wings on SPHINCS
    • Gimli: a cross-platform permutation
    • Haraka - Efficient Short-Input Hashing for Post-Quantum Applications
    • The SKINNY Family of Block Ciphers and its Low-Latency Variant MANTIS
    • Troika: a ternary cryptographic hash function
    • A Brief Comparison of Simon and Simeck
    • State-recovery analysis of Spritz
    • Observations on the SIMON block cipher family
    • Security of AES with a Secret S-box
    • Practical Attacks on AES-like Cryptographic Hash Functions
    • Differential Cryptanalysis of Keccak Variants
    • Practical Attacks on the Maelstrom-0 Compression Function
  • Slides
    • Example Talk: Recent Work
  • Talks
    • A note on SPHINCS+ parameter sets
    • Post-quantum Cryptography at Google
    • Crypto Agility and Post-Quantum Cryptography @ Google
    • How to Abuse and Fix Authenticated Encryption Without Key Commitment
    • ShiftRows Alternatives for AES-like Ciphers and Optimal Cell Permutations for Midori and Skinny
    • Post-quantum Cryptography
    • Update on the PQCrypto Project
    • Putting Wings on SPHINCS
    • How to instantiate Hash-based Signatures?
    • Tools for Cryptanalysis
    • Lightweight Cryptography for the Internet of Things
    • Haraka v2 - efficient short-input hashing for post-quantum applications
    • A brief comparison of SIMON and SIMECK,
    • PQHash - Short Input Hashing
    • State-recovery Analysis of Spritz
    • Observations on the SIMON block cipher family
    • Practical attacks on AES-like Cryptographic Hash Functions
    • Differential Cryptanalysis of Keccak Variants
    • Cryptanalysis of a SHA-3 Candidate
    • Practical attacks on the Maelstrom-0 compression function

CryptoSMT

Oct 20, 2019
Code
projects

CryptoSMT is a tool for automating differential cryptanalysis for cryptographic primitives. It uses SMT solvers to find optimal differential trails and calculate probabilities for various block ciphers and hash functions.

Last updated on Oct 20, 2019
Cryptanalysis Block Ciphers Hash Functions Differential Cryptanalysis
← Skinny
Gimli →

© 2026 Stefan Kölbl. This work is licensed under CC BY NC ND 4.0

Made with Hugo Blox Kit. Build your site →