{\reset@font\mtcSfont\mtc@string\contentsline{section}{\noexpand \leavevmode \numberline {3.1}Overview}{\reset@font\mtcSfont 42}{section.3.1}}
{\reset@font\mtcSSfont\mtc@string\contentsline{subsection}{\noexpand \leavevmode \numberline {3.1.1}Kerckhoffs’s Principles}{\reset@font\mtcSSfont 42}{subsection.3.1.1}}
{\reset@font\mtcSSfont\mtc@string\contentsline{subsection}{\noexpand \leavevmode \numberline {3.1.2}Asymmetric Cryptography}{\reset@font\mtcSSfont 42}{subsection.3.1.2}}
{\reset@font\mtcSSfont\mtc@string\contentsline{subsection}{\noexpand \leavevmode \numberline {3.1.3}Symmetric Cryptography}{\reset@font\mtcSSfont 43}{subsection.3.1.3}}
{\reset@font\mtcPfont\mtc@string\contentsline{paragraph}{\noexpand \leavevmode Primitives and Constructions.}{\reset@font\mtcPfont 43}{section*.40}}
{\reset@font\mtcPfont\mtc@string\contentsline{paragraph}{\noexpand \leavevmode Security of Primitives.}{\reset@font\mtcPfont 43}{section*.41}}
{\reset@font\mtcPfont\mtc@string\contentsline{paragraph}{\noexpand \leavevmode Generic Attacks.}{\reset@font\mtcPfont 43}{section*.42}}
{\reset@font\mtcPfont\mtc@string\contentsline{paragraph}{\noexpand \leavevmode Dedicated Attacks.}{\reset@font\mtcPfont 43}{section*.43}}
{\reset@font\mtcPfont\mtc@string\contentsline{paragraph}{\noexpand \leavevmode Security Margin.}{\reset@font\mtcPfont 44}{section*.44}}
{\reset@font\mtcSfont\mtc@string\contentsline{section}{\noexpand \leavevmode \numberline {3.2}Elements of Symmetric Cryptography}{\reset@font\mtcSfont 44}{section.3.2}}
{\reset@font\mtcSSfont\mtc@string\contentsline{subsection}{\noexpand \leavevmode \numberline {3.2.1}Block Ciphers}{\reset@font\mtcSSfont 44}{subsection.3.2.1}}
{\reset@font\mtcPfont\mtc@string\contentsline{paragraph}{\noexpand \leavevmode Security Goal.}{\reset@font\mtcPfont 44}{section*.45}}
{\reset@font\mtcPfont\mtc@string\contentsline{paragraph}{\noexpand \leavevmode Generic Attacks.}{\reset@font\mtcPfont 45}{section*.46}}
{\reset@font\mtcSSfont\mtc@string\contentsline{subsection}{\noexpand \leavevmode \numberline {3.2.2}Stream Ciphers}{\reset@font\mtcSSfont 45}{subsection.3.2.2}}
{\reset@font\mtcSSfont\mtc@string\contentsline{subsection}{\noexpand \leavevmode \numberline {3.2.3}Hash Functions}{\reset@font\mtcSSfont 46}{subsection.3.2.3}}
{\reset@font\mtcSSfont\mtc@string\contentsline{subsection}{\noexpand \leavevmode \numberline {3.2.4}MACs}{\reset@font\mtcSSfont 46}{subsection.3.2.4}}
{\reset@font\mtcSSfont\mtc@string\contentsline{subsection}{\noexpand \leavevmode \numberline {3.2.5}AEAD}{\reset@font\mtcSSfont 47}{subsection.3.2.5}}
{\reset@font\mtcSSfont\mtc@string\contentsline{subsection}{\noexpand \leavevmode \numberline {3.2.6}Permutation-Based Cryptography}{\reset@font\mtcSSfont 47}{subsection.3.2.6}}
{\reset@font\mtcSfont\mtc@string\contentsline{section}{\noexpand \leavevmode \numberline {3.3}Preliminaries of Cryptanalysis}{\reset@font\mtcSfont 47}{section.3.3}}
{\reset@font\mtcSSfont\mtc@string\contentsline{subsection}{\noexpand \leavevmode \numberline {3.3.1}(Quantum) Security Models}{\reset@font\mtcSSfont 48}{subsection.3.3.1}}
{\reset@font\mtcPfont\mtc@string\contentsline{paragraph}{\noexpand \leavevmode Discussion on the $Q1$ and $Q2$ Models~\blx@tocontentsinit {0}\cite {bonnetain2022beyond,kaplan2015quantum,zhandry2012construct,ito2019quantum}.}{\reset@font\mtcPfont 48}{section*.47}}
{\reset@font\mtcSSfont\mtc@string\contentsline{subsection}{\noexpand \leavevmode \numberline {3.3.2}Differential Cryptanalysis}{\reset@font\mtcSSfont 49}{subsection.3.3.2}}
{\reset@font\mtcSSfont\mtc@string\contentsline{subsection}{\noexpand \leavevmode \numberline {3.3.3}Linear Cryptanalysis}{\reset@font\mtcSSfont 49}{subsection.3.3.3}}
{\reset@font\mtcSfont\mtc@string\contentsline{section}{\noexpand \leavevmode \numberline {3.4}Some Quantum Attacks}{\reset@font\mtcSfont 49}{section.3.4}}
{\reset@font\mtcSSfont\mtc@string\contentsline{subsection}{\noexpand \leavevmode \numberline {3.4.1}Distinguisher on One-Time Pad}{\reset@font\mtcSSfont 50}{subsection.3.4.1}}
{\reset@font\mtcSSSfont\mtc@string\contentsline{subsubsection}{\noexpand \leavevmode \numberline {3.4.1.1}Description of the One-Time Pad}{\reset@font\mtcSSSfont 50}{subsubsection.3.4.1.1}}
{\reset@font\mtcSSSfont\mtc@string\contentsline{subsubsection}{\noexpand \leavevmode \numberline {3.4.1.2}Quantum Attack (in $Q2$)}{\reset@font\mtcSSSfont 50}{subsubsection.3.4.1.2}}
{\reset@font\mtcSSfont\mtc@string\contentsline{subsection}{\noexpand \leavevmode \numberline {3.4.2}3-round Feistel Network}{\reset@font\mtcSSfont 51}{subsection.3.4.2}}
{\reset@font\mtcSSSfont\mtc@string\contentsline{subsubsection}{\noexpand \leavevmode \numberline {3.4.2.1}Description of Feistel Networks}{\reset@font\mtcSSSfont 51}{subsubsection.3.4.2.1}}
{\reset@font\mtcSSSfont\mtc@string\contentsline{subsubsection}{\noexpand \leavevmode \numberline {3.4.2.2}Quantum Attack (in $Q2$)}{\reset@font\mtcSSSfont 51}{subsubsection.3.4.2.2}}
{\reset@font\mtcSSfont\mtc@string\contentsline{subsection}{\noexpand \leavevmode \numberline {3.4.3}The Even-Mansour Cipher}{\reset@font\mtcSSfont 52}{subsection.3.4.3}}
{\reset@font\mtcSSSfont\mtc@string\contentsline{subsubsection}{\noexpand \leavevmode \numberline {3.4.3.1}Description of the Even-Mansour Cipher}{\reset@font\mtcSSSfont 52}{subsubsection.3.4.3.1}}
{\reset@font\mtcSSSfont\mtc@string\contentsline{subsubsection}{\noexpand \leavevmode \numberline {3.4.3.2}Quantum Attack in $Q2$}{\reset@font\mtcSSSfont 52}{subsubsection.3.4.3.2}}
{\reset@font\mtcSSfont\mtc@string\contentsline{subsection}{\noexpand \leavevmode \numberline {3.4.4}FX Construction}{\reset@font\mtcSSfont 52}{subsection.3.4.4}}
{\reset@font\mtcSSSfont\mtc@string\contentsline{subsubsection}{\noexpand \leavevmode \numberline {3.4.4.1}Description of the FX Construction}{\reset@font\mtcSSSfont 52}{subsubsection.3.4.4.1}}
{\reset@font\mtcSSSfont\mtc@string\contentsline{subsubsection}{\noexpand \leavevmode \numberline {3.4.4.2}Grover-meets-Simon Attack}{\reset@font\mtcSSSfont 53}{subsubsection.3.4.4.2}}
{\reset@font\mtcPfont\mtc@string\contentsline{paragraph}{\noexpand \leavevmode Remark.}{\reset@font\mtcPfont 53}{section*.51}}
{\reset@font\mtcSSfont\mtc@string\contentsline{subsection}{\noexpand \leavevmode \numberline {3.4.5}Q1 attack on Even-Mansour cipher}{\reset@font\mtcSSfont 53}{subsection.3.4.5}}
{\reset@font\mtcSSSfont\mtc@string\contentsline{subsubsection}{\noexpand \leavevmode \numberline {3.4.5.1}Collision Attack}{\reset@font\mtcSSSfont 53}{subsubsection.3.4.5.1}}
{\reset@font\mtcSSSfont\mtc@string\contentsline{subsubsection}{\noexpand \leavevmode \numberline {3.4.5.2}Offline Simon}{\reset@font\mtcSSSfont 54}{subsubsection.3.4.5.2}}
{\reset@font\mtcSSfont\mtc@string\contentsline{subsection}{\noexpand \leavevmode \numberline {3.4.6}Other Simon-based Attacks}{\reset@font\mtcSSfont 54}{subsection.3.4.6}}
{\reset@font\mtcSfont\mtc@string\contentsline{section}{\noexpand \leavevmode \numberline {3.5}Protocols}{\reset@font\mtcSfont 55}{section.3.5}}
{\reset@font\mtcPfont\mtc@string\contentsline{paragraph}{\noexpand \leavevmode AKE Protocols.}{\reset@font\mtcPfont 55}{section*.53}}
{\reset@font\mtcPfont\mtc@string\contentsline{paragraph}{\noexpand \leavevmode Partnering and Freshness.}{\reset@font\mtcPfont 55}{section*.54}}
{\reset@font\mtcPfont\mtc@string\contentsline{paragraph}{\noexpand \leavevmode Oracles.}{\reset@font\mtcPfont 56}{section*.55}}
{\reset@font\mtcPfont\mtc@string\contentsline{paragraph}{\noexpand \leavevmode Security.}{\reset@font\mtcPfont 56}{section*.56}}
