| Differentially uniform mappings for cryptography K Nyberg Workshop on the Theory and Application of of Cryptographic Techniques, 55-64, 1993 | 1098 | 1993 |
| Perfect nonlinear S-boxes K Nyberg Workshop on the Theory and Application of of Cryptographic Techniques, 378-386, 1991 | 606 | 1991 |
| Message recovery for signature schemes based on the discrete logarithm problem K Nyberg, RA Rueppel Workshop on the Theory and Application of of Cryptographic Techniques, 182-193, 1994 | 488 | 1994 |
| A new signature scheme based on the DSA giving message recovery K Nyberg, RA Rueppel Proceedings of the 1st ACM Conference on Computer and Communications …, 1993 | 373 | 1993 |
| Man-in-the-middle in tunnelled authentication protocols N Asokan, V Niemi, K Nyberg International Workshop on Security Protocols, 28-41, 2003 | 333 | 2003 |
| Linear approximation of block ciphers K Nyberg Workshop on the Theory and Application of of Cryptographic Techniques, 439-444, 1994 | 333 | 1994 |
| Provable security against a differential attack K Nyberg, LR Knudsen Journal of Cryptology 8 (1), 27-37, 1995 | 302 | 1995 |
| Manual authentication for wireless devices C Gehrmann, CJ Mitchell, K Nyberg RSA Cryptobytes 7 (1), 29-37, 2004 | 277 | 2004 |
| Provable security against differential cryptanalysis K Nyberg, LR Knudsen Annual International Cryptology Conference, 566-574, 1992 | 269 | 1992 |
| On the construction of highly nonlinear permutations K Nyberg Workshop on the Theory and Application of of Cryptographic Techniques, 92-98, 1992 | 244 | 1992 |
| Message recovery for signature schemes based on the discrete logarithm problem K Nyberg, RA Rueppel Designs, Codes and Cryptography 7 (1), 61-81, 1996 | 223 | 1996 |
| Efficient mutual data authentication using manually authenticated strings S Laur, K Nyberg International Conference on Cryptology and Network Security, 90-107, 2006 | 206 | 2006 |
| Generalized feistel networks K Nyberg International conference on the theory and application of cryptology and …, 1996 | 175 | 1996 |
| UMTS security V Niemi, K Nyberg John Wiley & Sons, 2006 | 127 | 2006 |
| Multidimensional extension of Matsui’s algorithm 2 M Hermelin, JY Cho, K Nyberg International Workshop on Fast Software Encryption, 209-227, 2009 | 118 | 2009 |
| Improved linear distinguishers for SNOW 2.0 K Nyberg, J Wallén International Workshop on Fast Software Encryption, 144-162, 2006 | 113 | 2006 |
| Integral and multidimensional linear distinguishers with correlation zero A Bogdanov, G Leander, K Nyberg, M Wang International Conference on the Theory and Application of Cryptology and …, 2012 | 112 | 2012 |
| S-boxes and round functions with controllable linearity and differential uniformity K Nyberg International Workshop on Fast Software Encryption, 111-130, 1994 | 108 | 1994 |
| Method for sharing the authorization to use specific resources S Sovio, N Asokan, K Nyberg, V Niemi US Patent 7,343,014, 2008 | 104 | 2008 |
| Constructions of bent functions and difference sets K Nyberg Workshop on the Theory and Application of of Cryptographic Techniques, 151-160, 1990 | 100 | 1990 |
