A Meet-in-the-Middle Attack on 8-Round AES

We present a 5-round distinguisher for AES. We exploit this distinguisher to develop a meet-in-the-middle attack on 7 rounds of AES192 and 8 rounds of AES-256. We also give a time-memory tradeoff generalization of the basic attack which gives a better balancing between different costs of the attack. As an additional note, we state a new squarelike property of the AES algorithm. Key words: AES, Rijndael, meet-in-the-middle cryptanalysis, square attack.

• Type: Conference
• Year: 2008
• Where: FSE
• Authors: Hüseyin Demirci, Ali Aydin Selçuk
• Keywords: Basic Attack, Cryptology, FSE 2008, Meet-in-the-middle Attack, Time-memory Tradeoff Generalization