A highly selective key search policy based on a variant of Bayesian optimization which, together with the neural distinguishers, can be used to reduce the remaining security of 11-round Speck32/64 to roughly 38 bits.
A. Gohr
1 papers