IACR Transactions on Symmetric Cryptology (Ruhr-Universität Bochum, 2018)