Related-key rectangle attacks on reduced AES-192 and AES-256

Authors:
Jongsung Kim;Seokhie Hong;Bart Preneel
Affiliations:
Center for Information Security Technologies, Korea University, Anam Dong, Sungbuk Gu, Seoul, Korea;Center for Information Security Technologies, Korea University, Anam Dong, Sungbuk Gu, Seoul, Korea;Katholieke Universiteit Leuven, Dept. ESAT/SCD-COSIC, Heverlee, Belgium
Venue:
FSE'07 Proceedings of the 14th international conference on Fast Software Encryption
Year:
2007

Citing 23
Cited 25

The Design of Rijndael

The Design of Rijndael
Related-key cryptanalysis of 3-WAY, Biham-DES, CAST, DES-X, NewDES, RC2, and TEA

ICICS '97 Proceedings of the First International Conference on Information and Communication Security
Improved Impossible Differential Cryptanalysis of Rijndael and Crypton

ICISC '01 Proceedings of the 4th International Conference Seoul on Information Security and Cryptology
Differential Cryptanalysis of DES-like Cryptosystems

CRYPTO '90 Proceedings of the 10th Annual International Cryptology Conference on Advances in Cryptology
Differential-Linear Cryptanalysis

CRYPTO '94 Proceedings of the 14th Annual International Cryptology Conference on Advances in Cryptology
Key-Schedule Cryptoanalysis of IDEA, G-DES, GOST, SAFER, and Triple-DES

CRYPTO '96 Proceedings of the 16th Annual International Cryptology Conference on Advances in Cryptology
Cryptanalysis of LOKI91

ASIACRYPT '92 Proceedings of the Workshop on the Theory and Application of Cryptographic Techniques: Advances in Cryptology
The Rectangle Attack - Rectangling the Serpent

EUROCRYPT '01 Proceedings of the International Conference on the Theory and Application of Cryptographic Techniques: Advances in Cryptology
The Boomerang Attack

FSE '99 Proceedings of the 6th International Workshop on Fast Software Encryption
Improved Cryptanalysis of Rijndael

FSE '00 Proceedings of the 7th International Workshop on Fast Software Encryption
Amplified Boomerang Attacks Against Reduced-Round MARS and Serpent

FSE '00 Proceedings of the 7th International Workshop on Fast Software Encryption
Related Key Attacks on Reduced Round KASUMI

FSE '01 Revised Papers from the 8th International Workshop on Fast Software Encryption
Impossible differential cryptanalysis of 7-round advanced encryption standard (AES)

Information Processing Letters - Devoted to the rapid publication of short contributions to information processing
Cryptanalysis of Skipjack Reduced to 31 Rounds Using Impossible Differentials

Journal of Cryptology
Related-key rectangle attack on the full SHACAL-1

SAC'06 Proceedings of the 13th international conference on Selected areas in cryptography
Related-key rectangle attack on 42-round SHACAL-2

ISC'06 Proceedings of the 9th international conference on Information Security
A related-key rectangle attack on the full KASUMI

ASIACRYPT'05 Proceedings of the 11th international conference on Theory and Application of Cryptology and Information Security
Related-key rectangle attacks on reduced versions of SHACAL-1 and AES-192

FSE'05 Proceedings of the 12th international conference on Fast Software Encryption
Related-Key impossible differential attacks on 8-round AES-192

CT-RSA'06 Proceedings of the 2006 The Cryptographers' Track at the RSA conference on Topics in Cryptology
The boomerang attack on 5 and 6-round reduced AES

AES'04 Proceedings of the 4th international conference on Advanced Encryption Standard
Related-Key boomerang and rectangle attacks

EUROCRYPT'05 Proceedings of the 24th annual international conference on Theory and Applications of Cryptographic Techniques
Related-Key attacks on reduced rounds of SHACAL-2

INDOCRYPT'04 Proceedings of the 5th international conference on Cryptology in India
Related-key attacks on the full-round cobra-f64a and cobra-f64b

SCN'06 Proceedings of the 5th international conference on Security and Cryptography for Networks

A Unified Approach to Related-Key Attacks

Fast Software Encryption
A Meet-in-the-Middle Attack on 8-Round AES

Fast Software Encryption
Improved Impossible Differential Attacks on Large-Block Rijndael

ISC '08 Proceedings of the 11th international conference on Information Security
New Related-Key Boomerang Attacks on AES

INDOCRYPT '08 Proceedings of the 9th International Conference on Cryptology in India: Progress in Cryptology
New Impossible Differential Attacks on AES

INDOCRYPT '08 Proceedings of the 9th International Conference on Cryptology in India: Progress in Cryptology
Reflection Cryptanalysis of Some Ciphers

INDOCRYPT '08 Proceedings of the 9th International Conference on Cryptology in India: Progress in Cryptology
Advanced Differential-Style Cryptanalysis of the NSA's Skipjack Block Cipher

Cryptologia
Attacking 9 and 10 Rounds of AES-256

ACISP '09 Proceedings of the 14th Australasian Conference on Information Security and Privacy
Related-Key Cryptanalysis of the Full AES-192 and AES-256

ASIACRYPT '09 Proceedings of the 15th International Conference on the Theory and Application of Cryptology and Information Security: Advances in Cryptology
Improved Meet-in-the-Middle Attacks on AES

INDOCRYPT '09 Proceedings of the 10th International Conference on Cryptology in India: Progress in Cryptology
Related-key differential-linear attacks on reduced AES-192

INDOCRYPT'07 Proceedings of the cryptology 8th international conference on Progress in cryptology
Cryptanalysis of white-box DES implementations with arbitrary external encodings

SAC'07 Proceedings of the 14th international conference on Selected areas in cryptography
Improving integral attacks against Rijndael-256 up to 9 rounds

AFRICACRYPT'08 Proceedings of the Cryptology in Africa 1st international conference on Progress in cryptology
Rotational cryptanalysis of ARX

FSE'10 Proceedings of the 17th international conference on Fast software encryption
Pseudorandom functions and permutations provably secure against related-key attacks

CRYPTO'10 Proceedings of the 30th annual conference on Advances in cryptology
Tweaking AES

SAC'10 Proceedings of the 17th international conference on Selected areas in cryptography
Notions and relations for RKA-secure permutation and function families

Designs, Codes and Cryptography
The (related-key) impossible boomerang attack and its application to the AES block cipher

Designs, Codes and Cryptography
Key recovery attacks of practical complexity on AES-256 variants with up to 10 rounds

EUROCRYPT'10 Proceedings of the 29th Annual international conference on Theory and Applications of Cryptographic Techniques
Automatic search for related-key differential characteristics in byte-oriented block ciphers: application to AES, Camellia, Khazad and others

EUROCRYPT'10 Proceedings of the 29th Annual international conference on Theory and Applications of Cryptographic Techniques
Cryptanalysis of the Full AES Using GPU-Like Special-Purpose Hardware

Fundamenta Informaticae - Cryptology in Progress: 10th Central European Conference on Cryptology, Będlewo Poland, 2010
Evaluation of PP-1 Cipher Resistance against Differential and Linear Cryptanalysis in Comparison to a DES-like Cipher

Fundamenta Informaticae - Cryptology in Progress: 10th Central European Conference on Cryptology, Będlewo Poland, 2010
Study on the security of the extended version for the ISO/IEC international standardized block cipher SEED

Security and Communication Networks
Cryptanalysis of reduced-round KLEIN block cipher

Inscrypt'11 Proceedings of the 7th international conference on Information Security and Cryptology
Improved impossible differential attacks on large-block rijndael

ICISC'12 Proceedings of the 15th international conference on Information Security and Cryptology

Quantified Score

Hi-index	0.00

Visualization

Abstract

This paper examines the security of AES-192 and AES-256 against a related-key rectangle attack. We find the following new attacks: 8-round reduced AES-192 with 2 related keys, 10-round reduced AES-192 with 64 or 256 related keys and 9-round reduced AES-256 with 4 related keys. Our attacks reduce the complexity of earlier attacks presented at FSE 2005 and Eurocrypt 2005: for reduced AES-192 with 8 rounds, we decrease the required number of related keys from 4 to 2 at the cost of a higher data and time complexity; we present the first shortcut attack on AES-192 reduced to 10 rounds; for reduced AES-256 with 9 rounds, we decrease the required number of related keys from 256 to 4 and both the data and time complexity at the cost of a smaller number of attacked rounds. Furthermore, we point out some flaw in the 9-round AES-192 attack presented at Eurocrypt 2005, show how to fix it and enhance the attack in terms of the number of related keys.