The property that we want for this to be secure is that the resultant function has so-called high algebraic degree. Grubner basis attacks come from interpretation of this process separately like you look into individual rounds they're all of degree five and then you make them into a single system. As the number of rounds grows it also increases the complexity of this Grubner based attacks because what happens is that you have to solve bigger and bigger set of equations.

Get the Snipd
podcast app

Unlock the knowledge in podcasts with the podcast player of the future.
App store bannerPlay store banner

AI-powered
podcast player

Listen to all your favourite podcasts with AI-powered features

Discover
highlights

Listen to the best highlights from the podcasts you love and dive into the full episode

Save any
moment

Hear something you like? Tap your headphones to save it with AI-generated key takeaways

Share
& Export

Send highlights to Twitter, WhatsApp or export them to Notion, Readwise & more

AI-powered
podcast player

Listen to all your favourite podcasts with AI-powered features

Discover
highlights

Listen to the best highlights from the podcasts you love and dive into the full episode