All right. Good afternoon, everyone. Welcome back. Hopefully you had a great day yesterday and even better day today for the For those who went out to the remembering ceremony. Hopefully it wasn't too hot. I was waiting outside I saw a couple people coming off the bus first thing It was tough out there, so thanks for bearing through it You could you had the option for the livestream, but we understand so hopefully you had a good time outside out there next year That's right next year and Just want to say thanks for allowing us to the opportunity on behalf of DPAA for you being here I know we kept saying it keep saying thank you, but we can't Say it enough and re-emphasize that fact So just thank you for allowing us this opportunity to be here with you to be here for you and for us to all experience this together For those of who I haven't had the chance to meet. My name is Mark Obwig I'm the new director of outreach and communications here at DPA. I've been here for about three months and I Say three months because at the end of this event you're gonna have a survey So depending on what you say the survey, maybe I'll say along. Maybe they'll let me stay longer than three months We'll see but just a little bit about me born raised four-door, California army veteran station Korea as a soldier Did some time there as a civilian. I was Deployed to Iraq and also was in Afghanistan as a civilian So through all that I'll throw out my little journey there here at DPA Glad to be part of the family and glad to be here with all you family. So thank you for the opportunity Before we get into a rundown of today's agenda I just a few admin notes for those who haven't had the opportunity to provide a sample or if you want to After will be outside until about 430. Don't go rushing out yet But when you get a chance they will be there until 430 and one more at one more note Is that unfortunately we had a DPA employee who it was experiencing cold like symptoms So they tested unfortunately they tested positive this morning So there they're in isolation right now. They are in good spirits So that's a good thing and they'll continue to be in the health and safety protocols And we asked that you closely monitor your own safety and well-being wear a mask If that's something you want to do and just a reminder that we have the classroom in this general direction Where I'm pointing that's a stream that is has our live stream up in case you feel more comfortable in that venue And and they can see it up to 32 people just in case you need that room All right, I'm going to go into the agenda and if you want to follow along while I'm reading it On page three pages three and four are agenda for today We're gonna right after I'm done speaking We're gonna go into our remembrance remembering ceremony which you can reference on page 12 as a guide But I'll go more into it once we start But after that we have a few recorded remarks from some of our invitees from the Republic of Korea and Department of State Then we'll roll into A special presentation by Dr. Don Berry about partner research projects followed by Dr. Jung Woo Han And he'll give a presentation as well with contributors for a panel type discussion And after that we will have a carryover session from yesterday in case you weren't able to Ask a question So we'll have time for that as well Then after that we'll hear from our director mr. McKeg for some closing comments Then we'll roll into a few other admin notes for tonight in case you're going to go to the twilight the army twilight tattoo ceremony All right, so that all sound good All right All right We're going to go into the remembrance ceremony. So if you want to go to page 12 of your program booklet as a guide This is your opportunity to to Tell us a little bit about your story as far as your uh, your family member and of course not mandatory But if you want to go ahead and share we have service members Position throughout the room if you want to go ahead and raise your hand that you can see the they're in uniform. They will have mics In hand ready for you to share your story Would anyone like to help us get started? All right I'm sorry, my name is marietta jessup and i'm coming from st. Louis, Missouri pray for us, please And i'm here on behalf of my uncle for patralli frazier uh, junior And this in this process. I was going along my mom was coming with me And because she wanted to find her brother and find out information about her brother. This is my first time here and i've been Searching and trying to find answers to my uncle's Disappearance or people are missing in the action There's been an ongoing thing for like five or six years Well, my uncle has been missing for 70 almost 70 years. He's been missing and we had no information We had no correspondence from the military all those years So I started investigating about six or seven years ago about my uncle charlie And I found out how I can get in touch with certain people and how to get information And then I got a letter telling me about this meeting My mom me and my mom started trying to get ready and everything for the meeting this right here But my mom died she died last august You know, she had uh cancer And she wanted to be here with me And I just i'm so excited about being here and i'm just so amazed about the wonderful things that's happened And I got something to take back to my family because we always wanted answers and I We have them And thank you guys Thank you, ma'am Would anyone else like to share? Oh, we have our hand raised in the back tucker from california. I lost my brother He was he's been missing since he was 18 And it's been 72 years now. And you know, I just want closure Um, I wanted to tell you that my brother went in the army and he was at four door And you know way back in the fifties. He would hitchhike home. We lived there Sacramento He would hitchhike home to save money to give my mom and help with the big family And at that time you could hitchhike and she would insist that you take the bus back to four door and You know, you think about that and he was a really good kid. He's really had our family at heart This is about the fifth or sixth time i've been to a briefing and it's just wonderful what the army has done To keep it informed about my brother. I appreciate all the work that everyone does. Thank you so much Hi, my name is tammy shrieve. My uncle felix yannes was 19 years old and he was Killed in action within the first two weeks of the war I'm here today representing my family. My mom and his sister are his only two living relatives and they're both too fragile to travel So i've been doing this for years and years and years going to different seminars and different locations One of the important things that I found to do is to get up and say your loved one's name Tell their story at one Meeting that we did in phoenix A lady heard my name heard me tell the story say his name She came up to me and told me that her brother was my uncle's best friend And told me the story about how they were in the backyard playing guitar and She remembers clear his day that they dared each other to go join the military So they ran down there enlisted and they were 17 years old Um And it was just kind of a piece of the puzzle to fit together to learn the story that mean none of us ever knew the story So it's important to get up tell your story. I'm scared to death speaking public I'm up here shaking and telling all of you because it's important To do this and good news is a few days before My fiance and I came here The military column said that they found my uncle's remains And in phase four he's one of the bodies So a few months ago they had called us and asked us to give another DNA sample so I think I don't know if it was because the format behind all that got him That they the chemicals they were putting in so when they asked for more samples It's not a guarantee but definitely do what you can to to help that out None of my other family members would I counted them and helped them None of them would provide a sample so just me and my mother did So definitely do that and always there's hope, you know, you never know when it's gonna happen It's 72 years almost to the day that he was killed that he was identified It's so wonderful to see all of you here. This is amazing I'm just and I know a lot of you a lot of the families already have identified their loved ones So they're not here. That's why we still got seats left so But you all look amazing and that those that are here for the first time, please come back I wanted to tell you Yes, it's wonderful to tell your story But also there are going to be a lot of veterans in your town or in your area That need to tell their story to take them into the schools I've done this eight times and I can guarantee you Everybody that I took in there had an incredible beautiful story And uh one in particular was a Joe man that he was a full book colonel And he was field promoted to a lieutenant to begin with and he was interrogated by russia As I spy for eight months during which time his son was born I took this man in and he stood for eight hours While he was had cancer leukemia and prostrate cancer at the same time Doing his testimony to all these kids and their eyes were like bigger than This big it was wonderful to watch And pass around his shadow boxes of metals But if you do this, I guarantee you that not only rich those kids lies, but it'll enrich your own and then you can tell your story to these kids And one teacher told me she said this is like Having history with skin on And it's a wonderful thing to do get involved with them. Don't go home and sit on your story But you know share it and go to the news media I've been on twice and I get such really good field feedback Color times is published three times But it all you always come away with something new And trust me it is a wonderful important thing And I know your father your brother your uncle they're all going to come home And my brother is going to come home too I have to tell it very similar to the one that this Told you earlier my uh uncle james howland coolwood was Killed in burrito of boris many Probably 72 years ago or very close to it And his family Been very serious about wanting him to be returned all that time Dad gave DNA 2014 About a year before he died And his two brothers gave DNA and they passed this Winner, but in may We got word but it was our benefit He also was in phase four of the principle He had been uh His remains have been removed from korea in 1953 and listed at that time As My father was captain jim s tremble He was in the chong chong river valley when he was shot down By the chinese he Told his troops to move he took cover fire So that they could move And I want to live long enough For him to come home my cousin Her my aunt was Very close to me And my cousin was an only child She was only her Her only child And when he disappeared She said she was going to train me And boy she trained me From leading to leading to leading to everywhere else And I've done it ever since I was a young girl I've been there every day that I go to And But you are in my heart and someday they find you While you're not here They get home This is my daughter I bring her from here Now Denise barge and my father was corporal done done done horde I asked my mother a couple years back if he was drafted or if he had listed He had listed because he wanted to go ahead and do his time come home and take care of her family and Own a gas station like his father Um Got married shortly before going over Apparently going to honeymoon. They had a good time Because a couple months later you found out he was going to be a father But it was um The last push for pork chop hill at the end of the war. He went missing in action So he never got to know whether he had a son or a daughter And I never got to know my father And his past year and my mother passed away So this is kind of very sweet because I would always go home after one of these and tell her everything This year I can't do that But I also realized before the day I have nobody else left in my life who did share the memories of my father to me And so I'm glad that some of you people got the chance to meet your loved ones and what's happened I'm sure hope you get the stories from your families Um, and I'm so glad that this organization exists. I wish I'd known about it years and years ago when my grandmother was still alive I found out because my husband being in the service, we used to get these afterburners And he had a little bourbon and that's how I got a hold of this organization So if you know anybody Tell me about this organization No matter what war it is My name is Robert Johnston Moore my father was sergeant James Fred Johnson My father joined the army Going to make it a career when he was 16 The local pharmacist said he was 18 My grandmother was not happy about that at all, but there wasn't anything she could do about it So anyway, he uh In 1940 when he went into the army he fought all the way through World War II fought on watercolor command Saipan, Guam Tinian and Actually survived all of that believe it or not and then uh went home for a while Married my mother they had known each other since they were in elementary school married my mother then they Went to Fort Bennington, Georgia for training for hippity training Spent some time there and uh, I think that's where I got started with the picture and what I understand from my mother and After that, my father shipped over to Japan The war had started uh shortly after that and he went to uh A kriya and landed in China my wife and I are going to a kriya in september And we're going to land in in China and to be able to go there where my father first put Put his feet on the kriya's soil It's going to be a special time 72 years later if you can imagine that Anyway, my father fought with the uh South Korean soldiers they went to uh Soul took that back with the Marine Corps. They took it back Then they went all the way up to the Chosin Residore and uh He made me from a fox over there named me after my grandfather after him And uh, I'm very proud son of his and the only child of his and uh He remains there today. I hope not but I hope he's in one of those 55 boxes or at the punch bowl So we're hopeful for that and looking forward to that and all the rest of you are as well But uh tomorrow, I'm going to be able to go to the Library of Congress and share my father's story to have it permanently put into the archives of of the Library of Congress and you can do that too by the way. That's a great way to keep the story alive. So Anyway, thank you for your time. I'm sorry to make up the onus I was with the military for a little bit about 33 years I am proud of my uncle. Well, excuse me. Yeah, my uncle. He was an idol. My father He he served in uh, uh, korea became my m.i.a. December the first 1950 I went to korea 1995 about an admission And not the same kind of mission he had been there with But still at that point I hadn't found out All the story that I have now And I am proud to say that As a veteran We always welcome people into our Units into our companies And every time I come here I ask people are you here by yourself? And it's surprising how many people will say yes. I'm here by myself. I don't have anybody here But we have each other. We don't need to be alone And it is yourself ask who you are who's your family member And together we can get through all of this. Thank you. My name is Polly Royer, and I'm here because of my father-in-law captain Ted Royer Uh, he was shot down on the northern border So they have never recovered the plane or the crew members or anything And potentially it's not looking good for any kind of an update So we haven't been going to updates But my husband Was seven years old when this happened His mother had a nervous breakdown He never went through the death process and the emotional Different things and I can tell you this story because he's asleep up in the hotel room Anyway, I knew nothing about any of this Because he was raised by his mother and his grandmother And they never disclosed any information. He never discussed any of this with me He still doesn't discuss this with me But I did find out when we were married for 30 years That when he was in high school He played mind games with himself He would put the baseball bat up on his shoulder and stand at home plate And tell himself if I had a home run, my dad's coming home. So he has been messed up all these years Thank goodness for the Air Force department Asked us several years ago and I said can we put a sign up on the highway On it and how to say Antonio Texas that said in honor of captain Ted Royer And they said well, have you ever had any kind of service? I said no, no kind of funeral, no kind of memorial. She had a nervous breakdown. Nothing ever happened They said an Arlington memorial service for us with a for strong carriage and the Air Force band And we had that we have the we still have the tombstone up there on the side of the hill So I want to read to you and to tell you that it's very important for you to Share the information that you have with your family with your children with your grandchildren because We might not be alive Whenever they finally get these remains. I know they will someday But um at this memorial service My grandson who is 10 years old now This happened in 2019 And my son is named after his grandfather. He's a Ted Royer also But my grandson read this at the service I'm here because of you And things I never saw you do My world is bright I sleep safe at night I'm here because of you There are others next to me. I hope that you can see They hold my hand And tell me I can be who I'm supposed to be I'll learn to stand up tall Help others when they fall And try to do all I can do I'm here because of you My name is Butch Morrow. My father was first lieutenant Carl Nelson Morrow. He was uh In the army He was in world war two like the gentleman over there said he lied about his age when he Got in and anyway, he's he's served in world war two over in the european theater Came out with a few little line in medals and a few little line in the scrapes and bumps and bruises But he did make it out But uh, he wanted the army life So he stayed in In the guards and he was assigned to a guard unit over in jackson, tennessee That's where I was born 75 years ago And on my birthday the other day my father's only remaining brother Gave me a call on my birthday on july 3rd Let me tell you a story that happened 75 years ago Butch said your dad comes pulling up in our driveway We lived out in the country your dad comes pulling up in our driveway and he says I want him That's my uncle and And his sister my dad's sister to go to jackson. We've got a new baby over there Said to need your help taking care of him. Well, that baby was me So my cousin tammy Went over there and my aunt Evelyn Y'all I've got parkings and so forgive my shakes, but anyway, that's just part of it, but but anyway Uh He said he went to work with uh nelson a few times and nelson worked at an armory over there in jackson Uh a second in command And he said I went to work with him a few times He said he never would take me over to the actual armory, but he worked at the federal building in jackson, tennessee Don't know if it's still there or not But it's the old federal building Well, I have a son who's an attorney. He's a federal prosecutor and guess where he works At the federal building in jackson, tennessee the same building that his granddad Worked in I said now that's just a real neat thing to know and it took 75 years for Us to find out about that, but anyway, that's a little bit of my story. My name is sally hernandez I'm here for my uncle Sergeant edward during Eaton My my uncle I'm never metting. I never met my birth parents. I was adopted when I was seven years of age Back in 1988 I decided I was going to start searching for my birth family Found them when I was 50 But I still never met my parents. I met my brothers and sisters During my search. I found the name of edward hannard eaton He was born in 1931 february He and my mother and all of her brothers and sisters were in the st. Joseph's orphanage and little rock art they saw Until they turned 18 years of age As soon as they turned 18 years of age, they were kicked out of the orphanage and on their own He immediately went and joined the army He was deployed in july 1950 And he died in november of 1950 He never ever had a life None of my brothers or sisters. I am the oldest living member of our family left None of my brothers and sisters knew anything about my uncle So I have since 1988 tried to find information Um, I think it was james bolt from her organization contacted me Shortly after my 50th birthday And I said I have information on him. He died in north korea After the tiger march, okay, so um I have made it my mission since then Well in the last 20 years To try to introduce him to my brothers and sisters And it would be a miracle and god can do it. He can bring all of our family members home And I wanted to thank the dedication of all of the servicemen here today and those that have Have died serving our country keeping us alive And um, I want to thank your organization for all that you have done to try to identify And bring home our loved ones I company third battalion under 87 My brother was a pair trooper Rock son He died in the battle of sujean sujean On october the 21st and his remains are somewhere else. They're not here He died just 24 hours after leaving kampo in Seoul and Crossing over into north korea where he was dropped In less than 24 hours he had died He was 18. I was six I often say Dan was my first love and my first grief We had different mothers. So I didn't know him all the time But he lived with us for a long while and he was there when I was born and many years several years after that And the story is that he loved me so much that he would take me in his arms Put a diaper in his back pocket and take me to the movies with him That was a big deal in 1940 in the 1940-44 when I was born and take me to the ocean, the Gulf of Mexico That owned his bicycle And so I know that I was wrapped in his arms And now I hold him in mine And when I visited korea in 2016 to have him on there I held his picture in my arms with all the other people who were doing the same on the soil that he would last see And I felt like then I finally had some kind of beginning a relief from all the pain of not knowing so much about him He too did not have a life So I have determined since I found out about all this to give him a life To do it as cool as I could so everybody that I need to know you he did live And when I was in korea The greatest joy for me was to touch his name on the wall of remembrance Because I didn't know as I say to dan They did not know your name. They did not know your face, but they knew your presence But it wouldn't be long until I saw that they had looked up his name And they had put it on a wall and I thought how wonderful, but I will never be able to go back to korea to stand there with that marker I did that yesterday We all stood by that marker and that's the only one that we have for him in this country He died at the battle of sin john because his his group the pair troopers that landed were just off the train That was carrying the most important high military for north korea and also the prisoners of war That probably many of your loved ones that was on the 20th They were executed that day the day before when he would land on the 21st And there you know the train was not stopped and the pow's were not saved but we know That wars are thought to the death And when they die our soldiers are not forgotten for as long as we love love someone Are we know someone or we love someone who loves someone they will not be forgotten I know that it's important to know that this war is not forgotten And as we keep hearing you hear that it's a remembered victory also I do want to say that Another point to someone made to be sure and tell your story I was here several years ago telling this about johnson john And about leaving campbell air force air base When a man tapped me on the shoulder And said I was there And he began to tell me all about the rain that fell and how it got postponed And they didn't get to leave till about three o'clock Because he was there doing the weights or the planes or making sure that they were the right whatever they had to be that I never understand And I realized then that it Adams Breathe the same air my brother did The last hours that he had on earth and this is it Excuse me, uh, first of all, I'd like to mention my own feeling that I think god is a good god He takes care of all of us and I sit here with mixed emotions High and low and some of the stories I hear because I was the 17 year old I was the one that went into korea. I was in uh A lot of part of july I was in open hour in 1950 the war started in july My brother named first went in in july the sixth They were the first groups in the 34th division and I was in open hour I was not aware of the fact that he had been in that they shipped him into korea However, because of the need of our groups going in for those of you who are not familiar with the history of why Uh, uh, korea stands out among a lot of the wars When our people went in whether you know it or not, they went in with a 45 pistol a clip A weapon And another clip and that was their protection Those first 500 and some that was brought out of tokyo To stop the passage of the groups going soft the koreans He was the buffer zone. Well, I was not aware exactly what his possession was But I do know in okinawa. I was attached to what they call the 29th group the airborne group our airplanes I was a loadmaster so to speak They needed help in korea and getting supplies into them A lot of people asked me, uh, what is the most memorial thing I can think about in, uh, korea and, uh It's a sorrowful thing, but every morning I wake up every night I go to bed. I think it's the same thing Uh, they dropped me into kimple the first day we took it It was the airport that made the airport south of seoul and we needed that for the fighter planes Coming in for regrouping and things like that Well that first day we went in we were unloading taking supplies up to the front about four o'clock in the afternoon We were notified all planes had a lead there was going to be an attack on The kimple field which she was related to at that particular time where we dropped her brother out of So that all the planes had to be taken out There was about 18 or 20 of us air airmen there that were not attached to any of the groups So we became infantry For for that evening and we were signed through a foxhole Now this the only reason I'm telling you because You have to understanding feeling like a vet that I appreciate what you're doing And it makes life worthwhile for me I was placed in the foxhole at about nine o'clock We were told there was a group coming up to take the field to prepare for hand-to-hand combat About 10 minutes we heard the group coming up the highway I had my rifle ready to fire A runner came down yelling abort abort abort that means to those that don't understand forget it drop to the ground Keep quiet. You don't mess with them nothing. We let the group grow through Well, I didn't know at that time really what I had just witnessed and why? About a month later. I was guarding some prisoners in kimple and the Base base commander came by and the jeep they loaded me on a plane flew me out of korea into japan And over the japan waters telling me that my brother had been captured And you know that two Siblings could not be in the same front at the same time So at that time they gave me a choice and it seems the news media is picked up on this But they asked me that I if I wanted to go home They say you can go home or you can go back to what you were doing And they asked me what I wanted to do and that's what I'm going back And the captain he said why I have said hell it's the right thing to do and uh anyway at that time When they told me about all this they also told me about my brother and then it came together That group you've heard of the death walk in korea When they first went in and hit that town there's 500 some people with our military They captured and killed half of them well that the North koreans were dressed as civilians And guarding the prisoners taken him on that death walk that group That I came two minutes from firing on my own brother was that group was coming through So to me every time I hear some of you talk I'm so thankful and I want you to know on behalf of all the veterans We appreciate what you're doing. You're wonderful and thank you My name is carlos I wanted to thank uh mr. William chuck williams and mike And the new director of the the miapow office for the united states marine court Our family is truly grateful for The hard work that they've done On behalf of my family My uncle was a private first-class thomas montoya When my uncle was listed as m ia kia a couple of days later He was with some of you remember iran mandra My uncle was with her brother philip And we my grandparents have been gone a long time My mother who was the closest to my uncle has been gone for a long time But we our family like you carry on this effort to try to Hopefully one day to bring him home Unfortunately the circumstances involving my uncle's death It's highly improbable that any remains what we recovered Um But it's good to be around people like yourselves to hear your stories and Because when I go back to salt lake I share them with the remaining aunts of my uncle Um A side note In utah it took me over 30 years to get the state of utah to build Uh a world war two memorial monument utah's never had one I was in the governor's office just covid hit Where he signed a bill So now we have midi coming together and hopefully in the coming years we'll have one Um a couple of hours ago. I met a fellow brother of mine I didn't get his name. I've had him over here for a couple of minutes And it made me Feel very proud again Talking with him He was with uh third special forces group. I was with seven special forces group It was wonderful To talk with someone like that again. It's been a long time for me He's a great role model for many of us Like many of you in uniform Thank you Hi, i'm jack witt my uncle jack Who i'm named after was in october 1952 his outpost was overrun And one of the five men made it out and he was one of the four that didn't and Soon as the Information got to my grandmother that my uncle was missing My dad got the bright idea to enlist And I say that out of respect. He went to korea to find uncle jack So you just have to know my father and the relationship we had so I just looked him in the eye one day and I said Dad that's about the dumbest thing you ever did He said but I couldn't leave him behind And I said I respect that that's not the dumb part. I said korea is a large place You're not just going to walk in to the bedroom. It's always over there He said it doesn't matter. I had to do it so He did what he had to do and and I respected that and He passed away in september of this past year And His word his love was the last words to me was it's on you now You have to take care of him when they bring him home. So the pressure is not on me Chuck it's on you guys You got to go get him so I can keep my work to my father Thank you That's wrong to set up an ambush and they were ambushed instead three hours of firefight later And when everyone regrouped my uncle was gone without a trace. That's what is one other gentleman if there's Anyone here from our martin's family? I'd love to meet you But the two of them have literally disappeared into thin air with no sightings No, they went back the next morning in canvass and they never found nothing no reports of either So I am just so thankful this has torn my father up for years again So many of the stories what happened to their mother as a result of this happening Her refusal to have a service We thought she was still sending care packages for years because she refused to acknowledge that this could have possibly happened And so I know my father had been doing the regional updates in the west He's just not in good health and able to do this. So it's on me And I am just so thankful for The community for everyone's hard work and I just can't say enough about the connections You never know. We're and how we're going to connect with people in fury all the way years ago started There was a work to start the on-flight and we had a privilege of welcoming home The veterans from the very monocle on-flight in peoria And my girls made signs that my girl that little girls made signs thanking them for their service and we put The 45th and same deal on the signs and You just never know at one We've been discussing an on-flight welcome home events after that and at one point there was a gentleman at the other side of the airport that just Was frantically grabbing his family members and shaking them and pointing to us and pointing at us And when all of a sudden done and he was very frail they're helping him and he's just like looking over to us If that was his infantry And we had no idea and while he didn't necessarily didn't know my uncle it's still The connection with that family because when we saw On my uncle on the sign all of his family members are just falling and hanging on to him realizing Just across the airport Long way that that could have been done And so get out there and tell the story. Thank you to everyone I'm here by myself, but I was adopted by table 15. So thank you And Again passing on my daughter's now 19 and 21 and some obsessed with carrying this on and Wanting to go to Korea and wanting to find out more. So I just can't thank everyone enough For all you're doing all the opportunities Is Mary Chiddister Borowitz and I'm here for my father colonel arthur a chiddister Who is lost in chosen reservoir? december 1950 And then my story is a bit different than I've been hearing here today because My mom never spoke about him And we paid As young kids. I was seven years old the oldest of four children We really didn't spend a lot of time talking about him. We didn't have pictures of him My mother remarried and after that there was definitely nothing Going on about our dad and I grew up Being anti-military. I was angry. I could not understand why my father Abandoned four children to go off and fight who knows where who cares? That's how I fell for years for decades I spent a lot of time being really really angry. I fought against the vietnam war And it's taken me a very long time to come back to Some semblance of peace with this and it happened because After my mom died I got her address book and I say not notices to all the people in her address book that she had died And up comes a message from a person I now call uncle slim Slim russell. He had known my dad And he made his way out to visit us in california from florida to tell stories to us I collected my brothers and sisters so all now adults And we listened with tears to his stories About our dad when he chose to go into the service No one had ever told me he went in to take care of his family by being in the service And something he felt was important to do I had never heard that And it just really brought me up short And I started thinking I do things because I think it's important to do and I believe in it And he did too Let me jump forward to 2015. I was able to go to korea With the first group of people. I want to highly recommend that program And it was there also that I got such a huge picture Of how much the south koreans appreciated us I had no way of knowing what there was a mean to them what there was a mean in their lives And I didn't have any way of knowing about that Everywhere we went there were banners hanging. Thank you. Thank you to your heroes and Banners on the buses and a banner on our sheets in the bed of the hotels I met a man in the grocery store Who spoke english and came up and thanked us my sister and I were there And I went This is like this isn't somebody who created this situation This person just volunteered and came up. So I thought I guess that really is the case So When I think about this group It has helped me to come to terms with Why it is that he chose to be in the military And having the ability to come to these meetings has really helped me a lot. Thank you Hello, my name is sue Bowden I am here to honor my uncle dandy airman first class dandy harris pillsbury I've been inspired by all of the stories that I've heard from all of you I've been inspired by the dedication of the korean war memorial But I'm here to talk about an mia from the truly forgotten war and that's the cold war My uncle was 22 years old when he Boarded a flight with his 11 other service members. It was in the air force and They took off over the sea of japan On june 13th 1952 His plane went down. My grandmother was told he was the youngest of 12 kids and like the other Seven or other six brothers ahead of him. They'd all been in various branches of the military during world war two So he felt it was important that he also served his country by being in the military My grandmother was told that he was on a weather reconnaissance flight And that his plane had gone down over the sea of japan So for 20 years, that's what we all understood But then in 1992 The gates opened Allowing the united states to get more information About those service men or about those flights that went down During the cold war and lo and behold, we found out that My uncle's plane was a reconnaissance plane, but it wasn't for the weather. It was a spy plane Of russia and so the russian two mid fighter jets shot their plane down Not that far from russian land We never knew really what happened to him. There were conflicting reports as to all of us all the 12 flight crew were lost at sea And then there were other reports that there was wreckage scene and that there was a possibility that some of the Some of the flight crew had been taken prisoner All my mother's life She believed that my uncle lived after that crash and that he was someplace and I know that when she died She still felt that but I appreciate that's all of the work that the dpaa has done to Honor not only the korean war and the cold war But all of the other wars that have have resulted in mias out there to help bring some closure to families We'll probably never have closure But I feel like it's my responsibility of that next generation since all all 12 of the pillsbury clan are gone now to Continue to to try to access Information and to share that information with the rest of my family so that they can Truly keep our hero our family heroes spirit alive. Thank you Before we get on to our next speaker I just quick admin note as far as our agenda for the cold war families We have an optional breakout session an open discussion with our principal deputy director mrs. Fern sumter windbush And army colonel john lust and marine colonel matt brandon And they are in studio a is an alpha and for any cold war families who would like to Go go in the session you can Follow our marine captain conrad ganski and he can show you to the room. Thank you. We'll go on to our next family member Hi, good afternoon My name is jip cribbin and i'm here to our father my uncle and actually my other uncle Robert there were three 17 year olds living in coronado in san diego in 1952 that decided they all wanted to enlist in the marine corps Luckily my mother's brother had better parental supervision and he said no I'm not signing and letting you go into the marines, but you can go into the navy So my uncle went into the navy and ended up serving aboard the manchester for two years in country My father and his identical twin brother Had no such luck they were sent off to uh Well, they ended up in the What is now the dmz? And they were assigned to outpost vegas Outpost vegas saw a three-day battle march 26 1953 And though they wouldn't let my dad and his brother fight Go on outpost together. They did serve together in the same unit. They had one serial number separated them So while my father was back at the main line of resistance, uh, they would flip a coin They were identical So they would flip a coin to decide who had to do the bad duty and if they had to change shirts to do it That's what they would do So one of these coin flips resulted in my uncle going out on outpost vegas about 1500 yards Beyond where my father was back at the mlr at about 7 p.m 3000 chinese Oprah and the outpost My uncle was never seen again so Getting involved in all of this it really it really injured my dad badly And a lot of ups and downs over the years and in 1969 He did have a nervous breakdown and he was committed for two years where they proceeded to give him 13 elect work shock treatments Among other medications and it just didn't go well So I got involved in trying to Help out with the search and I found a lot of information by coming to these meetings and it's just a wonderful thing to do But I did want to mention parts about my father's experience there In in an attempt to search for his brother He moved forward into the into the rice paddies where a mortar shell came and landed in and he did receive some A shrapnel wound to the hand So he was taken back to the aid station It was later that day where he stopped a transport troop truck carrying dead marines and decided that he would stop that transport troop And he spent the next hour or two on zipping body bags looking for his brother So Anyway, uh the part that I'd like to get to is that uh about five years ago I started an organization to try to build housing for veterans with post-traumatic stress disorder And uh so far we've raised some good money and we've held golf tournaments and and whatnot And luckily I live in San Diego very close to camp penalty So our fundraising effort has kind of morphed into uh A two-fold effort And this year we were able to host 52 active duty marines from camp penalty and our golf tournament Where they get to come and enjoy a day of r and r surrounded by uh civilians who really appreciate what they do If you guys get a chance, please go to jimmy's house dot org and and uh, you can see our mission and what we're trying to do To make lives better for uh others My name is megan marx. I'm here for my mother Jerry angel who passed away in 1999 Her first husband was white angel. He was an ensign in the navy And his plane went down on January 18th 1953 Over the straits of Formosa The other men on that plane included Ronald B. Clifford Byers, William McClure, Paul Morley and Lloyd Smith To our knowledge, we're the only family here that represent the members of that crew That crew unfortunately was not honored on the wall of the members We're fighting to get their names put on there and I know that there are other people whose family members are not on that wall as well They died in service to their country and We are eternally grateful for the support and the information that we get here that helps us to understand what happened and How will to be with the rest of you? My name is Alpina Tunkins golden and my father was master sergeant Ruben Tunkins And I wanted to comment that ladies statement About the way she felt about her father leaving and not knowing the reason and I had that same feeling But many many years many years. I mean most of my life And what made me stop having that feeling was I had my father the gentleman spoke about that yesterday If you can you can have a headstone placed at Arlington or your state Uh military They won't uh, if it's found they won't let him have another funeral But they will provide that in your state or at Arlington and in 2015 I did that I just figured i'm getting older. I'm an only child So I might as well do it and have it done and know I can rest I can rest in peace But um, I was very angry with my father believing me I was seven years old And he told me I'll be back and he never came back So I'd say angry In 2015 when I had him the headstone placed at Arlington I was invited to South Korea. So I was in South Korea in 2015 too, but I was privileged to go with Four civilians and all generals these handsome generals and over And we were able to go with them And I think the lady is here. That was my He's back there. She's one of the ladies and it was a couple and that was it So we got to see what I needed to see to get closure We needed to see it from a military point of view We also got to see I think they did to the reenactment of the korean war Where my father may have come in from japan and all So there is a way for some closure I mean when I came back after that And meeting the people in Korea and the way that they treated me and the humility and the gratitude to us Everything changed I could forgive myself my father Just everybody the government Because they did not have a korean war memorial and that is why I came I didn't believe it when they said it I saw it online. Nope. They're not going to do it. They've been promising, you know And it was there and I am very grateful that that has occurred in my lifetime My daughter was with me. She says they're gonna have and I said, I don't know, you know, but I am very grateful to this organization. They have done a lot with me coming throughout the years and I come quite often Whatever I've asked them for they got it. I have never asked them for anything that I did not get I got the matter of fact when we had the ceremony for my dad I was the only one there nobody could get off work So I had the entire What do you call all the I had the burial team the airplanes the rifles everything sitting there by myself And it was okay and I was also told sometimes that even people that don't have family members that are Is capable or able to come that they will do the same ceremony for them too and tape it and send it to them So if you're young you knew it this you're with a good group Just ask them. They're not going to fail you. It might take them a minute But they will not fail you and I'm glad I know all of them and I appreciate them. Thank you My name is Jerry Carpowitz. I'm named after my uncle who was playing with shot down on May 17th 1953 We're all brothers and sisters here. So I just like to add to what my sister who just talked Said and my sister from San Antonio said about the memorial services We had one for my uncle last last august 6th at early international cemetery. It was spectacular We had we had to fly over the strangest thing about the flyover was that I was told that they shut down The Baltimore airport Reagan airport on Dulles so that they could do the flyover Unbelievable unbelievable experience Um So I strongly suggest having a memorial memorial service for your loved one Because although they haven't found your loved one yet when they do find your loved one He'll have he or she will have a place ready for him or her And I'm very biased about this but the air force catapulting office people not a fool might see in here I can't imagine that any other service has best people I've come to know these people a number of years.  Thank you. It's good to see everybody here again I've been to several meetings and I never You had the courage to stand up but I just wanted to say how much I appreciate your organization and how much I've learned from from everybody that I've dealt with my my uncle My my I come from the Mulcarrey family my dad and all four all three of His other brothers served my dad in the first uncle in world war two and then My uncle charlie enlisted in the army when he was 17 in 1946 and he was in japan during the pressuration he Came out of the service During that two year period his mother had passed away with his my grandfather had been gone for a long time So uncle charlie came back to the states and worked a little bit. He wanted to buy a car So he decided to re-enlist go back to japan because it's easy duty and Make the money and come out and have money to buy a car He was in the first group that was sent into south korea. He was with a third infantry regiment And he was in korea less than 20 21 days He was missing and the my aunt Told me when I when I started this she was the only living sibling And uh, she told me that the charlie stayed with her the night before he shipped out And he told her he said I don't have a good feeling about this. I don't think I'll come home 21 days into his second You know his time in in korea He was gone. He's missing in action There's he was uh, and he was in the ballotation There's no record that he was ever a prisoner of war. There's no record that he was part of the title march But his body is not going to identify so I keep working and I keep hoping that He will one day I will get the phone call that he's been identified. I Was able to get my my aunt and her daughter To give DNA samples and my two male cousins To give DNA samples I'm the one working on this and I'm the only one who can't because of my relation You know because of where I stand in the family, but um, I hope that Um, one day we'll have any information to to recognize charlie all my life I grew up hearing stories with my dad and my other uncle and my aunt talking about him and he was um he was Declared missing in action july 19th 1950. I was born 13 months later But I feel like I've known charlie just like I've known all my other uncles and um It just It's such an honor to me that I'm the I'm able to to work to try to get his story and to find out what happened to him and um I've met so many nice people that in this In this organization coming to the the annual meetings here the regional meetings I've met so many people and to hear your stories to share my story Means a lot and I just I just hope and pray that one day we all have closure. Thank you. Thank you


My name is Neha Sattak and I'm the co-founder and CEO of Astrum Technologies. We are a space technology company trying to solve the internet connectivity problem of the developing countries. In developing world, 70% of the population lives in rural areas and yet there is no good connectivity infrastructure and satellites can be very effective in providing the internet connectivity to these areas. We're using millimeter wave technology to solve the internet connectivity problem by decreasing the cost of satellite internet access from space. It has been great attending the equals program and attending the ITU telecom world conference to the equals program. It gives me an opportunity to talk to many many countries at one location and try to understand their infrastructure problem and see if our solution fits their problems or not. And what we found was that most countries have similar problems when it comes to rural connectivity and remote connectivity. It was great meeting a lot of like-minded people so I have got in touch with a lot of relevant people with whom we can partner in the future so that our solutions can solve problems in not just one country but many countries.


Hello, everyone. My name is Leo, and I'm going to talk about ALZ, a 64-bit ARX box. This talk will also feature our new ciphers called Krax and T-Rax. This is very much a teamwork with Christophe, Alex, Luan, Johann, Alexei, Veslin, and Chingchu. Quite a team. In the beginning of this work was our new lightweight crypto submission called Sparkle. It consists of two hash functions called Ash, and several authenticated encryption schemes called Schwem. This is not the topic of the day. If you want to learn more about those, I suggest you have a look at our task paper presenting them. Instead, today I'm going to talk about ALZ. So in our initial submissions, the core components are permutations. These permutations themselves have a core component, ALZ. So the aim of this talk is to analyze this component and thus to shed some light on the security of our candidates. Along the way, we will also show that this component can be used to construct new tweakable block ciphers and new regular block ciphers. The outline of this talk is this kind of obvious. First I'm going to talk about ALZ, and then I'm going to talk about the new ciphers. So first, what is an SBOX? So this is a block cipher. It operates on n bits and it has a key kappa of a fixed length. n is usually 128, or in our case you will see 64 or 256. And it's a permutation of the space of n bit permutation of n bit strings, which is parameterized by a key. In practice, block ciphers operate using a round function. This round function is iterated multiple times using also a subkey called, in this case, Ki, which is xord into the state before the round function. The round keys are derived from the master key using the key schedule, which I'm not going to talk about today. And the round function itself needs to have several properties. So this was the findings of Claude Shannon, the Claude Shannon. In a block cipher, you need to have confusion and diffusion. And these two properties, you also need to have them at the level of the round function to a lesser extent. And then by iterating this round function, you get the property that you need for the full cipher. The idea of confusion is actually kind of difficult to formalize. It's that the relationship between the output bits, the input bits, and key bits has to be complicated. In practice, it means that it has to be highly nonlinear. Diffusion is simpler. It's the idea that all output bits need to depend on all key bits and all input bits. A convenient way of doing that is to use what we call an sbox layer. So you're going to have small functions that operate on a small part of the state, which are applied in parallel over the full state. These will enter the confusion. For diffusion, if we use a function which is linear, then it's, I'm not going to say easier, it's less difficult to quantify the dependency between the outputs and the inputs. So these small functions, s, that are applied in parallel on the state, that's the sbox. In practice, what does an sbox look like? Well, that's the sbox of the AES, the block cipher. You can specify it just using its lookup table. So in this case, it maps the input bit string of with eight zeros to the output bit string with zero x 63, etc, etc. You can also define it with a math formula, which is also the case for the AES. You can also use bit slice representation. So where each output bit is effectively a Boolean function of the input bits. So here we have the sbox of Kechak. It's a five-bit permutation in this case, and it has this nice representation. This is the case of small sboxes, which is the case usually. In Kechak it's five bits, in the AES it's eight bits, and these are pretty typical block sizes for sboxes. The advantages of using small sboxes are that the cryptographic properties are easy to study because computing the relevant properties for a permutation that has a small block size is computationally trivial. So if you want to compute the DDT, the LAT, or the AINF, when n is small, it's very easy. The resulting ciphers are easier to study also. That's one of the main selling points of the AES, which is that it's provably secure against some specific forms of differential and linear attacks because of the properties of the sbox and how they interact with the linear layer. They are easy to implement. You can simply use a lookup, and you win, or in the case of Kechak you have the bit slice representation, and voila. And for small block sizes components that are basically optimal are well known and easy to implement. So the multiplicative inverse in the final field has all that you need. It has a very high algebraic degree. It has very good differential properties, very good linear properties. In fact, the best that we know how to achieve. So it's a solved problem to some extent. Not everything is perfect though. If you are implementing your sbox using a lookup table, then you're going to have problems with side channel attacks. And in order to use a small sbox, you need to have a linear layer which provides strong diffusion, and that can be bottleneck in terms of performances. So you can have a linear layer which is strongly aligned, like in the hash functions tree bug, where the linear layer is this dense 8x8 matrix. Or you can have linear layers which are not aligned with the words in the sbox, in which case it can be more efficient, but then it's more difficult to study. So for instance, when you look at KJack, you have whole papers dedicated to the analysis of the differential properties of the permutation, which are needed because you can't use arguments as simple as in the case of the AES. You have alternatives to structures based on small sboxes, so you can have ciphers like Chacha or Speck, or the hash function Blake2 is the same, where you're going to have an arc's network, so it's not sbox-based, but then it can be very difficult to study. The question then is if it's possible for a cipher to not use small sboxes, while still allowing strong security arguments in the style that you can have when you use small sboxes. To answer this question, we need to answer an obvious question, which is what actually is an sbox, because we tend to think of them as small permutations that are implemented using their lookup tables, but now that we are defining sboxes using Boolean functions, it's not really a good description in my opinion. And since the sbox is supposed to provide confusion, we need then to answer the very deep question of what is confusion in a cipher. And that will quickly lead us to very deep philosophical questions to which I won't even pretend having the answer to. So let's see what are the properties that you need for a good sbox? You need that they have known, very important that we know, the properties and that they be good, obviously you want good properties, that are relevant to crypto. So differential properties, linear ones, integral algebraic properties. You want them to be good and you want to know them. That's what makes a good sbox. And that's pretty much it actually. You don't need to know its size. It's not really a criteria to be a good sbox. It's the only thing you care about is that the properties are known and that they're good. The size doesn't matter to define an sbox. And in fact, it's not an idea that we're introducing. We already have such things in Satchelna where you have a 16-bit transformation which was considered like a big sbox. You have a 128-bit transformation in Spook, which is a bit like a small block cipher, which you can see as a big sbox. And then you have four of those in parallel. And you also have the 96-bit spbox in Gimli, which can be seen in a way as a big sbox. So how do we design then a wide sbox? It's more complicated because with a small sbox that is four over eight bits, you can just compute their cryptographic properties using standard tools. But it's not really possible for wide sboxes. So let's write first a scope statement of the wide sbox we wanted to build. So first, we wanted our algorithms to be very good in software. It means that modular addition makes sense. Modular addition is not going to be so great in hardware, but on software it's extremely efficient. So we went for an arc structure with addition, rotation, and XOR. We wanted to be efficient on eight 16 and 32-bit microcontrollers. And that imposes then the use of 32-bit instructions, because if we used, say, eight-bit instructions, it would have been great on eight-bit microcontrollers, but it would have sucked on 32-bit ones. On the other hand, 32-bit instructions can also be very efficient on eight-bit microcontrollers. Also, since we are in the software case, we want to use parallel shifters. But then we have to use specific rotation amounts, because different rotations can have different cycle counts on different platforms. So we have to choose these rotations very carefully. We want the cryptographic properties to be both strong and well understood. As I said before, we want to use this as an sbox, so we have to know what it does. And that means we're going to have to use an iterated structure, because then we can leverage the literature on the analysis of block ciphers. If we build our sbox like a small block cipher, then we can analyze it like a small block cipher, and we know how to do that. We also want then to minimize its width, because if the width is not too large, then we can make some extensive experiments to ensure that our analysis is good. So we are going to stock two 32-bit words. So we need 32-bit words to be efficient on all microcontrollers, and only two of them to ease our analysis. And finally, we want to have diffusion that is as fast as possible inside the sbox, and in practice it's going to mean that we want to use different rotations in each round. So instead of having an identical round, which is repeated several times, there is going to be slight modifications in the rounds. This will complicate the analysis, but it will significantly increase the efficiency. So from this scope statement, we got an outline, and now from this outline, this is what we get. So something very simple with just three operations, an addition of a rotation, a xor of a rotation, and the addition of xor of a round constant. Questions remain, how many rounds do we need? So how many iterations of that? What are the rotation amounts that we need? These rotation amounts will decide the cryptographic properties, as well as the implementation properties, so we have to choose them very carefully. And also what sort of round constants do we want? Of course, we are going to want to pick the best constants and rotation amounts, and to pick the best, it means that we have an optimization problem, and then we need to have criteria to optimize for. So one of them is that alzett has to help prevent differential attacks. So this is the quantity we need to modify to optimize in this context. It's the maximum over all possible alpha and beta, where alpha is not zero, of the probability that alzett maps a difference equal to alpha to a difference equal to beta. This is very standard in symmetric crypto. In practice, since alzett operates on 64 bits, we cannot compute this quantity. Instead, we are going to estimate it, and we are going to do it again in a way which is very standard in symmetric crypto, which is that we're going to look at the best differential trail. So that's a sequence of differences that we lead from alpha to beta. So this probability, it's about the maximum taken over all possible delta one, delta two, and delta three of this product. Assumptions are being made in the background. So allow me to open a parenthesis to discuss those for a few seconds. The first assumption is the assumption that we can just multiply these probabilities, meaning that they are independent. A priori is not the case, but it's a standard assumption to make in symmetric crypto. Usually it's the mark of assumption. We rely on the addition of subkeys to have more confidence in the fact that it holds, but when we look at permutations with a fixed key, as is the case here, we do not have key additions, but we can still make this assumption and then see how it works in practice. That's how it's usually done. This also relies on the assumption that the probability is dominated by a single trail. Assumptions mean verification, so we need to verify if these hold experimentally, and we have, and they do. To make a long story short, the probabilities are indeed independent, I mean act as if they were independent, and the probability is indeed dominated by that of a single trail. So all is well and good, and I can just close the parenthesis, and we have that this approximation is true. This doesn't mean that the work is done far from it, then we need to find a way to estimate, to compute this maximum, and to achieve this we have used Matsui style research to find the best differential trail, or differential trails, if there are several of them. We have done the same type of analysis for the linear case, in this case it's not based on a Matsui search, we have used the SAT solver. We have repeated this analysis for many different sets of rotations, and we have picked the sets of rotations that were the best from an implementation standpoint, so those that have a very small distance to multiples of eight, think zero, one, seven, eight, nine, etc. And then we have picked those with the best differential probabilities and linear correlations, so the lowest. So that's what you have in this table. Here is the set of rotations for ALZ, these are minus logarithm the differential probabilities, if you estimate I described before, and below it's for linear correlation, so the higher the number the better, and for comparison we have also put these quantities for the 64-bit block cypher spec. When the numbers are in blue, like this 24 here, it means that we have a bound, so we know that the probability cannot be higher than 2 to the minus 24, but actually maybe the highest possible is 2 to the minus 25. We are not sure, but we are certain that it's at most 2 to the minus 24. And that's how we got ALZ. We have picked the best set of rotations, and that's the one that is pictured on the on the right of the screen, so 31, 24, etc., etc. I won't go over the specifics of how we have chosen the round constants, because that would take me very far, but we have found that if we use the same constant in each round then it's fine, and we have chosen them carefully to optimize even further the linear properties. So in the end the results for ALZ are as follows. Basically it kind of behaves like an AES round. So one iteration of ALZ has similar differential and linear properties, and two iterations of ALZ have similar properties to two rounds of AES, so that's one super S-box in this case. We have looked at many other attacks beyond differential and linear. We have also looked at integral attacks that would leverage the division property, and we have found that they can not cover more than six rounds. We have looked at invariance, linear ones, but also non-linear ones, and we have found them not to really be an issue. The algebraic degree increases very quickly because a modular addition has a high algebraic degree, and as I mentioned before we could make some experiments to see if there was a big clustering of the differential trails, so many differential trails with the same starting point, the same end point, but different values in the middle. This is something which is observable, but nothing to be worried about, and indeed the very fact that we could make these experiments is a nice aspect of ALZ. As for the name, well this is Luxembourg. If you don't really see where that is, these are the neighbors, France, Belgium, and Germany. The ALZ is this blue thing down the middle. It's a river, and you have a picture of ALZ taken in Luxembourg city, just under my face. H is the name of the hash function, and because it's very close to the University of Luxembourg, which is based in H sur ALZ, ALZ being the name of the river, so that's why. What more can we do with ALZ? Well, we can design new block ciphers possibly with a tweak. So first let's look at a very simple way of building a block cipher using a 64-bit arcs box. So if I give you a 64-bit test box and I ask you to build a 64-bit block cipher, how do you do it?  So very straightforward, you just take a master key that you cut in two halves, look for the first half, apply the arcs box, so the second half, apply the arcs box, and repeat. There is just a small issue if you do that, which is that you might have what we call slide attacks, and so to prevent it you just soar a round counter. And that's it. That's what we call cracks. But this is a round structure. We still need to give a number of steps. So this is a block cipher, EK. How would an attack work in practice? So how do attacks work against block ciphers? You have a distinguisher in the middle. So it's a property of the cipher that you would not expect from a random permutation. And you have that in center rounds, and you are going to try and reach these center rounds by guessing part of the keys from the bottom and from the top. So if you want to avoid attacks, you want to prevent the existence of a distinguisher with a complexity that you would find worrying. And you need to prevent an attacker from reaching the distinguisher in the middle rounds through key guessing. So you're going to compute the number of rounds that are needed to prevent all the distinguishers you know about and care about, and the number of rounds that is needed for all bits of the state to depend on all the bits of the key. The first is RE, the second is RD, and then the number of rounds is basically two times RD to prevent key guessing, plus RE to prevent distinguishers. And to be safe, you don't quite do that. You also allow for possible improvements in the cryptanalysis of the cipher, and you don't use one time RE, you do it one plus eta times RE, where eta is a security factor. And that's KRAX. So KRAX is a cute bird with a very nice haircut, and in our case it's a 64-bit block cipher with a 128-bit key, a very simple key schedule, and given the parameters we have and a security factor of 20%, we have that we need 10 rounds. KRAX is extremely lightweight, so this is a full implementation of KRAX. You can compile it, that's valid C code, that's the KRAX encryption in full. We have made some optimized implementation on microcontrollers, and we have compared them with the best implementations we are aware of of several lightweight block ciphers. This table is in the full version of the paper, the one which is on Eprint, and as you can see KRAX is extremely good, especially in terms of RAM. So the RAM usage for both encryption and encryption is four times lower than the second best, and since we don't really have a key schedule, this one is free compared to others. It's also very small and very fast, so pretty good lightweight block cipher, which you might consider using if you need such a thing. But what if you don't need a lightweight block cipher, but instead something much bigger? In other words, can you use a wide S-box in another way than the trivial one, which consists in just iterating it? Can you go beyond, so we would call this kind of structure even once or in symmetric crypto? Well, yes you can. That's what we call the long-trade strategy, so that's something we introduced when we designed Spark's in 2016, if I remember correctly. And the long-trade strategy is a design strategy which allows you to leverage wider S-boxes. So if you have an S-box which needs several iterations to offer good cryptographic properties like as it does, then it's better to avoid full diffusion in one round, because since your S-box is like a diesel engine, it needs time to get started, it's better to leave it some time to do its thing on its branch and then try to interact with it. So it's a principle which allows us to use a wide S-box and then we'll see why we would want to use wide S-boxes. So this idea of letting the S-box do its thing, in practice it means that you're going to have an SPN structure, a classical one, with a layer of S-boxes and then a linear layer for diffusion. What's specific is that the linear layer will be itself built like a faster network, so like you can see on the pictures. Why is it nice? Let's look at two steps. So when you have two steps, that's what it looks like and you know for a fact that some of the differences will have to go through two iterations of your wide S-box, so of LZ in our case. So we know that as soon as a difference enters here, it will have to go through a double arcs box, and that means that the probability of this trail will be at most 2 to the minus 32 in the case of LZ, which is very low. And you won't be able to leverage some hypothetical clustering that you could have, because the difference, the value of the difference here is fixed since you're tapping the value here to explore it on the other side. Same holds when you have more branches, especially in this case, this given the definition of L prime that we have used is an MDS layer, so it also provides strong diffusion. Long-trade strategy, how to use wide S-boxes to build block ciphers, and the t-rex round function is as follows. So that's just a 256-bit version where you have four 64-bit branches, and you add the tweak directly. So you have a key addition which is not represented with a complex key schedule in this case, but the tweak is just cut in two halves of 64 bits each, and you have the first half which goes here, and the second half which goes here. The tweak is added every second round, every second step, not at every step, because it turns out to give us better bounds. What kind of bound you ask? Give me some time. So how do we justify the security of a cipher built in this way? Why is this a nice way to build a cipher at all? So let's look at truncated trails. Truncated trail is a differential trail where you only care about whether the part of the state is active or not. So you don't care about the value, you just want to know if it's active or not. So for each S-box you want to know if it has a non-zero difference in its input or not. So if you have L-boxes, then you have two to the L possibilities per step. Each S-box is active or not. That's two possibilities, and you have two to the L. So if you have S steps to take into account, that gives you a total of two to the power L times S. So in the case of AES-128, which is a 10-round cipher with an 8-bit S-box where you have 16 of them applied in parallel, that gives you a search space of size 2,160. You're not going to enumerate all of those. So you can reduce this number to some extent using the properties of the linear layer. So not all transitions are possible from round to round to the next. So you can use that to reduce the search space significantly. But what you can do is use white S-box to reduce, and I mean reduce, the search space. In the case of the AES-128, if you were using LZ as your S-box, then you wouldn't have two to the 16 possibilities in each step. You would have two to the power two, which is quite significant. What this means is that if you have an algorithm which uses white S-boxes, like T-Rex, then you can enumerate all truncated traits. You can just loop over all of them. It's practical. It's practical and it's actually quite fast. You don't need a cluster to do that. And what you can do, for instance, and that's the idea of the long-trade strategy, is to enumerate all traits, and then for each of them, you compute a bound on the probability of the differential, and then you pick the worst bound you have found over all the possible traits, and that's a bound for the whole cipher. That's the idea of the long-trade argument. What happens when you add a tweak? So a tweak is kind of like a key, which is public, but not in the public key crypto sense, if that makes sense. So you have a tweakable block cipher has three inputs. The plain text, the key, as before, and the tweak. The tweak kind of acts like a key, but which you can assume is under the control of the adversary. So not only does the adversary know it, maybe they can even choose it, which gives a new venue for attack because then the adversary can inject differences through the tweak. So how do we handle this from a block cipher design's perspective? It's actually very easy when you have a cipher design using the long-trade strategy, because you could enumerate all the truncated differential traits before. Well, in our case, when you add a tweak, that's only two new inputs that you need to consider in every step, which is really not that much. So you can use the same approach as before. You just make a small, well, I'm not going to say tweak, you just make a small modification, which is that the tweak can cancel or maybe add new branches to your truncated tray. And what this means is that the related tweak security is very easy to assess, both from a conceptual and from a computational standpoint, when you have a cipher with wide S-boxes, which is built using the long-trade strategy. So we have gone from how do you build a wide S-box to how do you build a cipher using a wide S-box. And now finally, why do you want to build a cipher with a wide S-box? And one of the reasons why you want to do that is that it gives you very easy security arguments in the related tweak setting. So we have done just that. T-RaxL is a tweakable block cipher, sorry. So we have taken the round function that I have showed you before, added a key schedule to it to handle the master key. The tweak is just sort into the state every second step, because we have found that we got the best bounds when the tweak was added every second step. It has a 256-bit key, a 128-bit tweak, a 256-bit block size, and using the same type of analysis as before, we have found that it needs 17 steps. We have put a bound on the query complexity of the attacks. So an attacker can try as many keys as they want, but they cannot use more than 102 to the power 128 known or chosen plain texts. That's the idea. So it's just not realistic to allow the adversary to query a keyed or a call as many time as they want. And doing so would lead us to use too many steps in the primitive. So we have chosen to give it a very, very conservative bound and work from there. Why would you want to do that with a white tweakable block cipher? You can do some nice things, because you have at this stage quite mature modes of operation that need a tweakable block cipher, which are parallelizable. But then the problem you could have is that usually their security is in the birthday bound, follows the birthday bound on the block size. So the bigger the block size, the bigger the security. Hence the need for a white tweakable block cipher, which TRX provides you. Time to wrap up. So LZ, which is the key component of the Sparkle permutations, which are themselves the key components of our NIST lightweight crypto submissions, has well understood, which is what we want on this box to have, and strong cryptographic properties. So this provides new light, more light on the analysis of this NIST candidate. LZ can also be used to build a lightweight block cipher which is arguably at least as light as spec. It can also be used to build a white tweakable block cipher, which will allow you, since the modes are parallelizable, to better use vector instructions. And also, the wider block size is very interesting for people who work on post quantum symmetric crypto. So that's another context in which TRX could be useful. And maybe in your own design. That's a 64-bit test box. If you need such a thing, then just go ahead and use it. Finally, I urge you to not miss the talk on improved differential linear attacks with applications to arc ciphers, which deals with the cryptonesis of arc-based ciphers, which those using LZ very much are. And it's a paper by Christophe Bayerle and his co-authors, Christophe being a co-author of this one. So be sure to check this one out. And with that, I thank you.


A common thing I hear among people who are, I guess, switch detractors or just maybe into console wars, fans of other platforms, prefer games on other platforms, whatever the case might be, is that Switch has no games. Or Switch only has Nintendo games. And without Nintendo games, there's no reason to buy a Switch. Well today I'm going to present to you the top 20 games released on Switch this year based on Metacritic ratings. So based on critical rating, we're using Metacritic even though I know some people don't like that just because it is the industry standard when we're talking about reviews and aggregate reviews. So we're going to use Metacritic and we're just going to go to the top 20 games that have come out on Switch and what their Metacritic rating is. And you're going to find that there's actually quite a lot of variety that came out just this year in 2019, whether it was AAA third party, whether it was Old Ports, whether it was New Indie Games, Exclusive Games, there's actually a wide mix of content. So it turns out actually that if Nintendo Switch is your only gaming platform, you do not own a PlayStation 4, a gaming PC, an Xbox, or you don't even game on your phone much, you are going to have a wide variety of content available to you right now already from the past three years, but just this year. So here we go. Here's the top 20 games in order from 20 to number one based on Metacritic rating that have come out on Switch here in 2019. Number 20. The Sagia 4 Complete Plus. So the Sagia 4 has actually been a game that's been out for a little bit so this is a port, a complete edition port, but it has a Metacritic rating of 85 and it begins our list as a quality third party port. Number 19. The Witcher 3 Wild Hunt Complete Edition. The Witcher 3 is actually one of the greatest games, one of the highest rated games ever this entire generation and while the Switch version is not rated nearly as high as the other versions, it does chime in at 85 and makes number 19 on this list as a high quality third party triple A port to Switch. Number 18. Slay the Spire. Slay the Spire is an indie title that is basically a card based combat game. You're able to earn cards and buy cards as you progress through each stage in the game where you're fighting against different, it's kind of like a 1v1 fight situation for most of the game. I haven't played a lot of it, but it is a highly rated indie title, brand new this year on Nintendo Switch with a Metacritic rating of 85. Now you might be wondering how this compares to the last two that were also 85. This is just percentage points differences that ultimately round to an 85. So Slay the Spire ranks as the number 18th best rated game on Switch in 2019. Number 17. Cadence of Hyrule. Yes folks, here we have our first Switch exclusive game. If you guys remember the old Cadence game, this is kind of a spiritual sequel that might even lead to another Cadence game down the line, but this is one that's a crossover with the Legend of Zelda and needless to say it's pretty fantastic. It even has a nomination at the Game Awards for best musical score, you know, combining some of that Zelda goodness with the gameplay. It's a very, it plays like a Zelda game, but then doesn't because you're moving to the beat of the music and doing combat to the beat of the music. It's a very unique experience that I've actually spent a number of hours playing myself and I highly suggest you check it out, but it ranks at number 17 with the Metacritic rating of 86. Number 16. Blaze Blue Central Fiction Special Edition. This is another port of an older game, but it does come in with the Metacritic score of 86 at the number 16 spot. And it's interesting to me because I'm not really into the Blaze Blue franchise, but I know it's popular in certain parts of the world and it's great to have this on Switch as just adding more variety to the Switch's ever-growing library. Number 15. AI, The Somnium Files. So AI, The Somnium Files, chimes in with an 86 Metacritic rating, given it the 15 spot on the list. And it's another indie game, but it's one that's a little interesting. It's got this anime style to it. It's like an investigative thing where you're trying to solve a kidnapping along with some other people who have been hurt along the way. You're kind of a detective of sorts named Date. It's really interesting, interesting concept. A lot of choices, more like an ace attorney game where you're making like different choices along the way to get to certain objectives, but it's a very interesting game, very highly rated, very unique for an indie title. So that chimes in with the number 15 spot on Switch this year. Number 14. Luigi's Mansion 3. So Luigi's Mansion 3 also has a Metacritic rating of an 86, and it obviously is one of the best games to release on Switch in terms of exclusive games and especially Nintendo created Nintendo published exclusive games. Luigi's Mansion 3 is the third entry in the Luigi's Mansion franchise.  But honestly, Luigi's Mansion 3 is very deserving to be on this list at the number 14 spot with an 86. Again, all critic rating based, not my personal opinion. Number 13. Mortal Kombat 11. So here we have our first brand new day in date triple A release that came to Switch as well as Xbox One PlayStation 4, etc. It has an 86 Metacritic rating and this actually includes ratings for the Switch version, not just for Xbox, PC, PlayStation 4, etc. So Mortal Kombat 11 is one of the best fighting games to come out in a while that is not named Super Smash Bros. And the ratings show, the sales show, we do know it sold very well on Switch. And again, it's just more variety to that Nintendo Switch library here in 2019. Number 12. Assault Android Cactus Plus. So this is another interesting indie title that when I first read it, because I hadn't heard of it, I thought this was like a game built for like Android phones and just brought the Switch. But it turns out that that's not the case.  It's like a twin stick top down, it's kind of 2.5D perspective shooter that kind of has like Zelda based top down levels. It's really interesting, really cool looking, very high quality. That is why it's actually the number 12 spot ahead of games like Mortal Kombat 11 and Luigi Mansion 3 with an 86 Metacritic rating. Number 11. Star Wars Pinball. Yes folks, Star Wars Pinball almost made it into the top 10 rated games on Switch this year and you might say, man, that shows how weak the library is. But if you actually look at the top 20 rated games for every platform, you'll notice that indie games are actually getting a lot of play. And Star Wars being a major IP, being a pinball game, to even see a pinball game rank this high is very interesting to me. The game itself looks fantastic.  So yeah, pinball is a lot of fun. Star Wars version is obviously really great. It's got that Star Wars appeal plays fantastic. It's on Switch, 86 Metacritic rating, ahead of Luigi's Mansion 3. Hey, this isn't my list. This is a critic baserist, so there you go. Number 10. Astral Chain. So to start our top 10, we have Astral Chain, another Switch exclusive made by Platinum Games, published by Nintendo. The Astral Chain has often been overlooked, simply because it is an action game by Platinum. I think that's really all you need to say when it comes to being overlooked. It is one of the top rated games to release this year, especially when it comes to, if you just look at console exclusive games, Astral Chain is a game deserving of your time, deserving of your respect, especially if you like action oriented games. So I'm going to leave it at that because I haven't played enough of it to really deep dive, but Astral Chain starts off our top 10. Number nine. Link's Awakening. So Link's Awakening is another, I guess, quote unquote, Switch exclusive because it's actually like a remake of or remaster, however you prefer to call it, of the original Link's Awakening, way back on the Game Boy, and then the other version of it, the color version called Link's Awakening DX. It is a fantastic remake. There is some frame rate issues here and there that some people don't like dealing with and some people don't like the blur, kind of like a Gossip blur or whatever they put around the edges. But for what it is, it is an 87 overall Metacritic game and one of the top games released on Switch this year and one of Nintendo's few older games coming back that actually makes the top 20. So Link's Awakening, number nine, 87 Metacritic rating. Number eight, Cuphead. So Cuphead times it at number eight with 87 rating. We know this game came over from Microsoft with Microsoft's permission. And it's just a fantastic game. There isn't really anything I say about Cuphead that you guys probably don't already know. Just looking at that gameplay on screen, it is a fantastic throwback game to the cartoons of like the 50s and it's just a great game. One of the hardest platforming games that is out there, just in terms of the combat, is what really makes it difficult more so than the platforming, especially the boss fights. The boss fights get pretty insane in this game. And so yeah, Cuphead, number eight with an 87 on Metacritic rating for the Switch version. Number seven, Downwell. So here we have one of our first phone games that have imported the Switch. Downwell is actually one of the best games you can play on an Android or an iPhone. And now one of the best games you can play on Switch. It's just a fantastic game and it proves the concept that just because games are built for phones doesn't mean they can't translate well to Switch and can't be fantastic in their own right. Downwell is a very unique game where you have basically guns attached to your boots and you're kind of falling down a well and you're fighting your way, you're trying to be like a vigilante, trying to save people, there's quests, there's an in-depth story, believe it or not. The visuals are a direct callback to the Game Boy era where there's not really any colors, right?  And it's just a stunning game in its own right, using the limitations of a phone and limitations of the Switch to create something extremely unique and fantastic. There's not really another game like Downwell out there. And for how cheap it is in the eShop, it might even be worth checking out if you just happen to have some of those gold coins laying around. So that Downwell lands at the number seven spot with an 88 overall Metacritic rating. Number six, Super Mario Mecha 2. Don't know why I just did that, but Super Mario Mecha 2 does land at number six with an 88 overall Metacritic rating. This one came out during the summertime and is a fantastic experience. Definitely a really unique experience in comparison to even the original Mario Maker because it added slopes and a whole bunch of other things. And now with the 2.0 update coming out, which doesn't have anything to do with the Metacritic rating, you can play as Link soon, like actual Link, not just a costume version. So it's gonna be really interesting to see how Super Mario Maker 2 changes over time, but right now it is the sixth highest rated game according to Metacritic on Nintendo Switch in 2019 with an 88. Number five, What Remains of Edith Finch? So what remains of Edith Finch lands on Switch this year in the top five with an 88 Metacritic rating? It is a game that's been around for quite a bit of time, but the Switch version obviously has made pretty much this and all other indie games that come to it, like the ultimate indie game platform. It's been hard to play a lot of the best or the best indie games on the go unless you own a Vita. And even then, not all of the games really came to Vita. So to see this high quality console style exploration game in What Remains of Edith Finch on Switch is just an excellent thing. And again, just more variety in that Switch library. Number four, Fire Emblem Three Houses? Fire Emblem Three Houses is the top rated exclusive game coming to Switch this year. And obviously another excellent output from Nintendo. And honestly, it just continues kind of the renaissance of Fire Emblem that's been happening ever since Fire Emblem Awakening back on the 3DS. It definitely is deserving of the top four spot. And if I must say, injecting a little bit of opinion in, it deserves more nominations at the game awards, but whatever, it was only nominated for one award. So it is what it is. But Fire Emblem Three Houses lands at the number four spot on this list with an 89 Metacritic rating. Number three, Ori and the Blind Forest Definitive Edition. So Ori and the Blind Forest also has an 89 overall Metacritic rating. And we already know how awesome this game was on Xbox. It's another one of those Xbox games like Cuphead earlier that has come over to Switch and just finds a great home on the Switch platform. It's fully expected to sequel and any other Ori games will eventually come to Switch as well because it's just, it's an excellent game that fits well for what the Switch is. And that's not to say it wasn't excellent on Xbox as well, of course it was. But it's nice to be able to take Ori anywhere with you. So there you go. Number three spot, definitely deserving Ori and the Blind Forest Definitive Edition. Number two, Dragon Quest XI S, Echoes of an Elusive Age Definitive Edition. Yes folks, that is a big mouthful for what most people just call Dragon Quest XI. But it is notable that the Switch version is the highest rated and arguably best version of Dragon Quest XI. Not just because it includes all of the DLC, but it includes exclusive modes, exclusive content. You know, it has a mode where you can literally play like an old school Dragon Quest game instead of the newer style of it. It has optional, by the way, orchestrated music if you don't like the orchestrated music. And it has a 91 overall Metacritic rating which is just extremely high. One of the top rated games across all platforms. I think the top rated game of this year is actually coming up in a moment. But yeah, man, a 91 overall Metacritic rating, Dragon Quest has probably never been better than it is right now with this Switch version specifically. Number two, Dragon Quest XI S, Echoes of an Elusive Age Definitive Edition with a 91 overall Metacritic rating. Number one, Divinity Original Sin 2 Definitive Edition. Divinity Original Sin 2 Definitive Edition is not only a 93 Metacritic rating and number one on the Switch. It's actually the number one rated game of 2019. And I get it, it's a definitive edition of an older game but it's a really damn good game that has been overlooked by so many people. There is no reason that Divinity Original Sin 2 it shouldn't be as popular as games like The Witcher except for people just not being aware of it and not giving it its fair chance because Divinity Original Sin 2 Definitive Edition on Switch absolutely shines and is deserving of that number one spot. If you've ever played RPGs, Western RPGs, you play Divinity Original Sin, you play other ones, you'll start to realize the excellent quality presented here. And it's definitely deserving of the number one spot which is interesting in a sense. The top three spots are all going to older game ports that are getting definitive editions. I think that's very interesting that we're seeing that on Switch and combined with all the exclusives and everything. It's just a nice way to round out the top 20. And as you can see, with this top 20 list now complete we now have an idea of all the highest rated games on Switch this year. You see there's such a wide variety of content on Switch that anytime someone tells you that it's laughable, that Switch has nothing to play, that if you own the game on Switch, I feel sorry for you. I don't know what you're really feeling sorry for when you got Saga 4, The Witcher 3, Slay the Spire, Cadence of Hyrule, Blaze Blue, AI, The Somnium, Luigi's Mansion, Mortal Kombat, Assassin, I'm sorry, Assault, Android, Cactus, Star Wars, Pinball, Astro Chainlink, so we're getting combat down well. So we're going to make a two, we're raising either Thinch, Fire Emblem, Three Houses, Oriental Blind Forest, String Quest 11, and Divinity Origins 2. These are just such amazing games each individually in their own right. And it's such a wide variety of games from the more simplistic indie games to more complicated indie games to brand new AAA third party games and Mortal Kombat 11 to ports of some of the greatest games of all time to the best versions of those games like Dragon Quest 11 and obviously the exclusives. We got the Fire Emblems. We got the Link's Awakenings. We got the Astro Chains and Luigi's Mansions of the World. We have so many amazing games on Switch here in 2019 that anyone who tries to tell you otherwise clearly is just a hater at this point. Now it is okay, of course, to prefer the libraries that are available on other platforms. This is not a console war video. This is just a factual video about the top 20 Metacritic Rating games on Switch this year. So you guys let me know what you think. Which of these 20 are your favorite? Are there some on this list that you missed that maybe you might now consider? Let me know down in the comments below. Anyways, folks, I am Nathaniel Rovedance from Nintendo Prime. I wanna thank you so much for tuning in to this video, our first top list video in, man, probably since the Zelda Informer days. So thank you so much for tuning in and I'll catch you in the next video.


What are you waiting for? What am I waiting for? On the green? It's 260 to the green. Yeah, 260. What club did you play off the tee? Off the tee? Driver? And that went how far? I don't know. 220 maybe? 220? 220. Okay, you do know there's a group behind waiting on the tee, yeah? Take a wave, don't worry. Sun's shining. Gorgeous day, just nice to be out. I'm slowly losing the will to live. You know we've been out two and a half hours and we're only on the eighth hole. Take me home to my country road To the plain. I belong. For my days. I prefer to pull my own teeth out. I think I'll just play wedging, you know. Probably best to lay up. Think I come over the top there? Is that over the top? Was there too much inside? That's better, innit? I've seen better to you. Better? Yeah, it's much better. I don't need you to have another practice swing. Yeah, much better.