Skip to Main content Skip to Navigation
Conference papers

Structural Evaluation of AES and Chosen-Key Distinguisher of 9-Round AES-128

Abstract : While the symmetric-key cryptography community has now a good experience on how to build a secure and efficient fixed permutation, it remains an open problem how to design a key-schedule for block ciphers, as shown by the numerous candidates broken in the related-key model or in a hash function setting. Provable security against differential and linear cryptanalysis in the related-key scenario is an important step towards a better understanding of its construction. Using a structural analysis, we show that the full AES-128 cannot be proven secure unless the exact coefficients of the MDS matrix and the S-Box differential properties are taken into account since its structure is vulnerable to a related-key differential attack. We then exhibit a chosen-key distinguisher for AES-128 reduced to 9 rounds, which solves an open problem of the symmetric community. We obtain these results by revisiting algorithmic theory and graph-based ideas to compute all the best differential characteristics in SPN ciphers, with a special focus on AES-like ciphers subject to related-keys. We use a variant of Dijkstra's algorithm to efficiently find the most efficient related-key attacks on SPN ciphers with an algorithm linear in the number of rounds.
Document type :
Conference papers
Complete list of metadata

Cited literature [38 references]  Display  Hide  Download
Contributor : Pierre-Alain Fouque Connect in order to contact the contributor
Submitted on : Friday, December 12, 2014 - 9:34:09 AM
Last modification on : Thursday, April 4, 2019 - 10:18:05 AM
Long-term archiving on: : Friday, March 13, 2015 - 10:25:21 AM


Files produced by the author(s)



Pierre-Alain Fouque, Jérémy Jean, Thomas Peyrin. Structural Evaluation of AES and Chosen-Key Distinguisher of 9-Round AES-128. Advances in Cryptology - 2013, Aug 2013, Santa Barbara, United States. pp.21, ⟨10.1007/978-3-642-40041-4_11⟩. ⟨hal-01094302⟩



Record views


Files downloads