the extended abstract

the full report

the DFC announcement

---

In the full report Eq. (26) on p. 9 (as well as Eq. (22) in the extended abstract on p. 8), KC and KD has been flipped. It should read

EES=RT(0)|RT(1)|...|RT(63)|KD|KC.

---

In the extended abstract on p. 9, the two last lines of the EES string have been mixed up (this is a consequence of flipping KC and KD). It should read

78d56ced 94640d6e f0d3d37b e67008e1 86d1bf27 5b9b241d
eb64749a

---

We have been argued that some of our benchmarks do not yield a faster encryption rate than for DES (especially on 32-bit microprocessors) as we claimed in the DFC announcement. Those figures are however very close to and our updated benchmarks are now faster.

---

In the full report Theorem 1 on p. 23, $(3/4)n$ should read $(3/4)n-1$. Same remark on p. 24, l. 8.

---