Recently [1], Biham and Shamir announced an attack (Differential Fault Analysis, DFA for short) that recovers keys of arbitrary cryptosystems in polynomial (quadratic) complexity. In this paper, we show that under slightly modified assumptions, DFA is not polynomial and would simply result in the loss of some key-bits. Additionally, we prove the existence of cryptosystems on which DFA cannot re...

A quantitative and objective assessment of background electroencephalograph (EEG) in sick neonates remains an everyday clinical challenge. We studied whether long range temporal correlations quantified by detrended fluctuation analysis (DFA) could be used in the neonatal EEG to distinguish different grades of abnormality in the background EEG activity. Long-term EEG records of 34 neonates were ...

Exposure to 2,4-difluoroaniline (DFA) was monitored by GC-MS of DFA adducts bound to hemoglobin (Hb). In two studies, involving 20 and 16 workers potentially exposed to low concentrations of DFA, median concentrations of 10 (range 1-83) and 20 (range 4-322) pmole/g Hb were found, respectively. For better interpretation of these results, the in vivo binding of DFA to Hb was investigated. DFA was...

Subjects with impaired glucose tolerance (IGT) have increased myocardial partitioning of dietary fatty acids (DFAs) with left ventricular dysfunction, both of which are improved by modest weight loss over 1 year induced by lifestyle changes. Here, we determined the effects of a 7-day hypocaloric diet (-500 kcal/day) low in saturated fat (<7% of energy) (LOWCAL study) versus isocaloric with the ...

Di erential Fault Analysis (DFA) against AES has been actively studied these years. Based on similar assumptions of the fault injection, di erent DFA attacks against AES have been proposed. However, it is di cult to understand how di erent attack results are obtained for the same assumption of fault injection. It is also di cult to understand the relationship between similar assumptions of faul...

In this note we study automata recognizing birecurrent sets. A set of words is birecurrent if the minimal partial DFA recognizing this set and the minimal partial DFA recognizing the reversal of this set are both strongly connected. This notion was introduced by Perrin, and Dolce et al. provided a characterization of such sets. We prove that deciding whether a partial DFA recognizes a birecurre...

An analytical formula for the contributions of the trend leftovers in DFA method is presented, based upon which the crossovers in DFA are investigated in detail. This general formula can explain the calculated results with DFA method for some examples in literature very well.

Requirements to control the large decrease in serum calcium (Ca) due to parturition and to increase the feed intake soon after parturition have been well accepted in dairy cows. This study was aimed to investigate the feed intake affected by serum Ca concentration with difructose anhydride (DFA) III supplement in dairy cows soon after parturition. Fourteen transition Holstein cows were divided ...

In this paper we present improvements to the differential fault analysis (DFA) of the stream cipher Trivium proposed in the work of M. Hojśık and B. Rudolf. In particular, we optimize the algebraic representation of obtained DFA information applying the concept of Mutants, which represent low degree equations derived after processing of DFA information. As a result, we are able to minimize the ...

Automation and flexibility are often mentioned as key concepts in modern production industry. To increase the level of flexibility, deterministic finite automata (DFA) can be used to model, specify and verify the production systems. Often, it is also desirable to optimize some production criteria, such as for example the cycle time of a manufacturing cell. In this paper, a method for automatic ...