Biclique cryptanalysis of the full AES

Andrey Bogdanov, Dmitry Khovratovich, Christian Rechberger

    Research output: Contribution to journalConference articleResearchpeer-review

    Abstract

    Since Rijndael was chosen as the Advanced Encryption Standard (AES), improving upon 7-round attacks on the 128-bit key variant (out of 10 rounds) or upon 8-round attacks on the 192/256-bit key variants (out of 12/14 rounds) has been one of the most difficult challenges in the cryptanalysis of block ciphers for more than a decade. In this paper, we present the novel technique of block cipher cryptanalysis with bicliques, which leads to the following results: The first key recovery method for the full AES-128 with computational complexity 2126.1. The first key recovery method for the full AES-192 with computational complexity 2189.7. The first key recovery method for the full AES-256 with computational complexity 2254.4. Key recovery methods with lower complexity for the reduced-round versions of AES not considered before, including cryptanalysis of 8-round AES-128 with complexity 2124.9. Preimage search for compression functions based on the full AES versions faster than brute force. In contrast to most shortcut attacks on AES variants, we do not need to assume related-keys. Most of our techniques only need a very small part of the codebook and have low memory requirements, and are practically verified to a large extent. As our cryptanalysis is of high computational complexity, it does not threaten the practical use of AES in any way. © 2011 International Association for Cryptologic Research.
    Original languageEnglish
    Book seriesLecture Notes in Computer Science
    Volume7073
    Pages (from-to)344-371
    ISSN0302-9743
    DOIs
    Publication statusPublished - 2011
    Event17th International Conference on the Theory and Application of Cryptology and Information Security - Seoul, South Korea
    Duration: 1 Jan 2011 → …

    Conference

    Conference17th International Conference on the Theory and Application of Cryptology and Information Security
    CitySeoul, South Korea
    Period01/01/2011 → …

    Fingerprint

    Dive into the research topics of 'Biclique cryptanalysis of the full AES'. Together they form a unique fingerprint.

    Cite this