Parallel SAT Framework to Find Clustering of Differential Characteristics and Its Applications

The most crucial but time-consuming task for differential cryptanalysis is to find a differential with a high probability. To tackle this task, we propose a new SAT-based automatic search framework to efficiently figure out a differential with the highest probability under a specified condition. As the previous SAT methods (e.g., the Sun et al’s method proposed at ToSC 2021(1)) focused on accelerating the search for an optimal single differential characteristic, these are not optimized for evaluating a clustering effect to obtain a tighter differential probability of differentials. In contrast, our framework takes advantage of a method to solve incremental SAT problems in parallel using a multi-threading technique, and consequently, it offers the following advantages compared with the previous methods: (1) speedy identification of a differential with the highest probability under the specified conditions; (2) efficient construction of the truncated differential with the highest probability from the obtained multiple differentials; and (3) applicability to a wide class of symmetric-key primitives. To demonstrate the effectiveness of our framework, we apply it to the block cipher PRINCE and the tweakable block cipher QARMA. We successfully figure out the tight differential bounds for all variants of PRINCE and QARMA within the practical time, thereby identifying the longest distinguisher for all the variants, which improves existing ones by one to four more rounds. Besides, we uncover notable differences between PRINCE and QARMA in the behavior of differential, especially for the clustering effect. We believe that our findings shed light on new structural properties of these important primitives. In the context of key recovery attacks, our framework allows us to derive the key-recovery-friendly truncated differentials for all variants of QARMA. Consequently, we report key recovery attacks based on (truncated) differential cryptanalysis on QARMA for the first time and show these key recovery attacks are competitive with existing other attacks

H. pylori-Eradication Therapy Increases RUNX3 Expression in the Glandular Epithelial Cells in Enlarged-Fold Gastritis

Helicobacter pylori (HP)-eradication therapy increases Runt domain transcription factor 3 (RUNX3) expression in the glandular epithelial cells in enlarged-fold gastritis. The aim of this study is to evaluate expression of the RUNX3 protein, the product of a gastric tumor suppression gene, and mutagenic oxidative stress in human gastric mucosal specimens obtained from patients with HP-induced enlarged-fold gastritis. Methods. RUNX3 expression was immunohistochemically scored and the degree of the mucosal oxidative stress was directly measured by the chemiluminescense (ChL) assay in the biopsy specimens. Results. RUNX3 expression was detected in the gastric epithelial cells. HP-eradication significantly increased RUNX3 expression in the glandular epithelium of the corpus, however, no change was observed in those of the antrum. A fourfold higher mucosal ChL value was observed in the corpus as compared with that in the antrum. HP-eradication significantly decreased the mucosal ChL values in both portions of the stomach to nearly undetectable levels. Conclusion. The glandular epithelium is exposed to a high level of carcinogenic oxidative stress and shows low levels of expression of the tumor suppressive molecule, RUNX3; however, this expression was restored after HP-eradication, suggesting the high risk of carcinogenesis associated with HP-induced enlarged-fold gastritis of the corpus

Nuclear localization of beta-catenin involved in precancerous change in oral leukoplakia

<p>Abstract</p> <p>Background</p> <p>Oral leukoplakia is a precancerous change developed in the oral mucosa, and the mechanism that oral leukoplakia becomes malignant through atypical epithelium is not known. Here we compared the β-catenin expression detected by immunohistochemical staining in the normal oral epithelium and in the oral leukoplakia with or without dysplasia.</p> <p>Results</p> <p>The normal oral epithelium showed β-catenin expression only in the cell membrane, but not in the nuclei. In the oral leukoplakia without dysplasia, 7 out of 17 samples (41%) showed β-catenin expression in the cell membrane, and 5 samples (29%) showed expression in the nuclei. In the oral leukoplakia with dysplasia, nuclear expression of β-catenin was shown in 11 out of 12 samples (92%). Incidence of nuclear β-catenin expression was significantly different between dysplasia and normal oral epithelium (P < 0.01), and also between oral leukoplakia with dysplasia and those without dysplasia (P < 0.01). Wnt3 expression was detected in the epithelial cell membrane or cytoplasm in oral leukoplakia where nuclear expression of β-catenin was evident, but not in epithelial cells without nuclear expression of β-catenin.</p> <p>Conclusion</p> <p>The components of canonical Wnt pathway, such as Wnt3, β-catenin, and cyclin D1, were detected, implying that this pathway is potentially involved in the progression of dysplasia in oral leukoplakia.</p

Context-dependent activation of Wnt signaling by tumor suppressor RUNX3 in gastric cancer cells

RUNX3 is a tumor suppressor for a variety of cancers. RUNX3 suppresses the canonical Wnt signaling pathway by binding to the TCF4/β-catenin complex, resulting in the inhibition of binding of the complex to the Wnt target gene promoter. Here, we confirmed that RUNX3 suppressed Wnt signaling activity in several gastric cancer cell lines; however, we found that RUNX3 increased the Wnt signaling activity in KatoIII and SNU668 gastric cancer cells. Notably, RUNX3 expression increased the ratio of the Wnt signaling-high population in the KatoIII cells. although the maximum Wnt activation level of individual cells was similar to that in the control. As found previously, RUNX3 also binds to TCF4 and β-catenin in KatoIII cells, suggesting that these molecules form a ternary complex. Moreover, the ChIP analyses revealed that TCF4, β-catenin and RUNX3 bind the promoter region of the Wnt target genes, Axin2 and c-Myc, and the occupancy of TCF4 and β-catenin in these promoter regions is increased by the RUNX3 expression. These results suggest that RUNX3 stabilizes the TCF4/β-catenin complex on the Wnt target gene promoter in KatoIII cells, leading to activation of Wnt signaling. Although RUNX3 increased the Wnt signaling activity, its expression resulted in suppression of tumorigenesis of KatoIII cells, indicating that RUNX3 plays a tumor-suppressing role in KatoIII cells through a Wnt-independent mechanism. These results indicate that RUNX3 can either suppress or activate the Wnt signaling pathway through its binding to the TCF4/β-catenin complex by cell context-dependent mechanisms. © 2014 The Authors

Distinguishing and Key Recovery Attacks on the Reduced-Round SNOW-V and SNOW-Vi

This paper presents distinguishing and key recovery attacks on the reduced-round SNOW-V and SNOW-Vi, which are stream ciphers proposed for standard encryption schemes for the 5G mobile communication system. First, we construct a Mixed-Integer Linear Programming (MILP) model to search for integral characteristics using the division property, and find the best integral distinguisher in the 3-, 4-, 5-round SNOW-V, and 5-round SNOW-Vi with time complexities of $2^{8}$, $2^{16}$, $2^{48}$, and $2^{16}$, respectively. Next, we construct a bit-level MILP model to efficiently search for differential characteristics, and find the best differential characteristics in the 3- and 4-round versions. These characteristics lead to the 3-round differential distinguishers for SNOW-V and SNOW-Vi with time complexities of $2^{17}$ and $2^{12}$ and the 4-round differential distinguishers for SNOW-V and SNOW-Vi with time complexities of $2^{97}$ and $2^{39}$, respectively. Then, we consider single-bit and dual-bit differential cryptanalysis, which is inspired by the existing study on Salsa and ChaCha. By carefully choosing the IV values and differences, we can construct practical bit-wise differential distinguishers for the 4-round SNOW-V, 4-, and 5-round SNOW-Vi with time complexities of $2^{4.466}$, $2^{1.000}$, and $2^{14.670}$, respectively. Finally, we improve the existing differential attack based on probabilistic neutral bits, which is also inspired by the existing study on Salsa and ChaCha. As a result, we present the best key recovery attack on the 4-round SNOW-V and SNOW-Vi with time complexities of $2^{153.97}$ and $2^{233.99}$ and data complexities of $2^{26.96}$ and $2^{19.19}$, respectively. Consequently, we significantly improve the existing best attacks in the initialization phase by the designers

Bit-wise Cryptanalysis on AND-RX Permutation Friet-PC

This paper presents three attack vectors of bit-wise cryptanalysis including rotational, bit-wise differential, and zero-sum distinguishing attacks on the AND-RX permutation Friet-PC, which is implemented in a lightweight authenticated encryption scheme Friet. First, we propose a generic procedure for a rotational attack on AND-RX cipher with round constants. By applying the proposed attack to Friet-PC, we can construct an 8-round rotational distinguisher with a time complexity of 2^{102}. Next, we explore single- and dual-bit differential biases, which are inspired by the existing study on Salsa and ChaCha, and observe the best bit-wise differential bias with 2^{&#8722;9.552}. This bias allows us to practically construct a 9-round bit-wise differential distinguisher with a time complexity of 2^{20.044}. Finally, we construct 13-, 15-, 17-, and 30-round zero-sum distinguishers with time complexities of 2^{31}, 2^{63}, 2^{127}, and 2^{383}, respectively. To summarize our study, we apply three attack vectors of bit-wise cryptanalysis to Friet-PC and show their superiority as effective attacks on AND-RX ciphers