Next: Bibliography Up: Mercy: a fast large Previous: Conclusions

Acknowledgements

Thanks are due to the anonymous reviewers both on this submission and on submission to Crypto '99, who provided valuable references and suggestions, to Stefan Lucks for his sound advice, and to David Wagner, David A Molnar, Conrad Hughes, and Keith Lockstone for their comments on an earlier design and for encouragement. Special thanks to Scott Fluhrer who has found a very effective differential attack on the cipher presented here, details of which are on the Mercy home page.