New Representations of the AES Key Schedules - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Mémoires D'étudiants -- Hal-Inria+ Année : 2020

New Representations of the AES Key Schedules

Résumé

In this master thesis we present new representations of the AES key schedules, with some implications to the security of AES-based schemes. In particular, we show that the AES-128 key schedule can be split into four independent parallel computations operating on 32 bits, up to linear transformation. Surprisingly, this property has not been described in the literature after more than 20 years of analysis of AES. As a consequence, iterating an odd number of key-schedule rounds results in a function with short cycles. This explains an observation of Khairallah on mixFeed, a second-round candidate in the NIST lightweight competition. Our analysis actually shows that his forgery attack on mixFeed succeeds with probability 0.44, completely breaking the scheme. The same observation also leads to a novel attack on ALE, another AES-based AEAD scheme.
Fichier principal
Vignette du fichier
Memoire.pdf (542.18 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-03135597 , version 1 (09-02-2021)

Identifiants

  • HAL Id : hal-03135597 , version 1

Citer

Clara Pernot. New Representations of the AES Key Schedules. Cryptography and Security [cs.CR]. 2020. ⟨hal-03135597⟩

Collections

INRIA INRIA2
124 Consultations
311 Téléchargements

Partager

Gmail Facebook X LinkedIn More