<abstract xmlns="http://www.w3.org/1999/xhtml"><p> The subject of this paper is linear and differential cryptanalysis of two rounds of the Advanced Encryption Standard (AES) with estimation of com- plexity for three-round AES attack. Presented linear attack is based on finding highly probable linear expressions and presented differential attack is based on finding specific bitwise differences. Data complexity of described linear and diffe- rential attack is 228 and 227, respectively, where 8 bits of subkey are recovered. Minimal complexity of linear attack on three-round AES is bigger than d × 260, where d is a small constant.</p></abstract>

The subject of this paper is linear and differential cryptanalysis of two rounds of the Advanced Encryption Standard (AES) with estimation of com- plexity for three-round AES attack. Presented linear attack is based on finding highly probable linear expressions and presented differential attack is based on finding specific bitwise differences. Data complexity of described linear and diffe- rential attack is 228 and 227, respectively, where 8 bits of subkey are recovered. Minimal complexity of linear attack on three-round AES is bigger than d × 260, where d is a small constant.

Linear and differential cryptanalysis of reduced-round AES

Mathematical Institute, Slovak Academy of Sciences, Štefánikova 49, SK-814-73 Bratislava, SLOVAKIA

Tatra Mountains Mathematical Publications

{"article-title":"Linear and differential cryptanalysis of reduced-round AES"}

The subject of this paper is linear and differential cryptanalysis of two rounds of the Advanced Encryption Standard (AES) with estimation of com- plexity for...

Linear and differential cryptanalysis of reduced-round AES

Pubblicato online: 13 nov 2012

Pagine: 51 - 61

DOI: https://doi.org/10.2478/v10127-011-0036-y

Parole chiave
AES, SPN, linear cryptanalysis, differential cryptanalysis, linear and differential probability, MELP.

This content is open access.

Linear and differential cryptanalysis of reduced-round AES

Pubblicato online: 13 nov 2012

Pagine: 51 - 61

DOI: https://doi.org/10.2478/v10127-011-0036-y

Parole chiaveAES, SPN, linear cryptanalysis, differential cryptanalysis, linear and differential probability, MELP.

This content is open access.

Parole chiave
AES, SPN, linear cryptanalysis, differential cryptanalysis, linear and differential probability, MELP.