[Resource Topic] 2008/435: Obtaining and solving systems of equations in key variables only for the small variants of AES

Welcome to the resource topic for 2008/435

Title:
Obtaining and solving systems of equations in key variables only for the small variants of AES

Authors: Stanislav Bulygin, Michael Brickenstein

Abstract:

This work is devoted to attacking the small scale variants of the Advanced Encryption Standard (AES) via systems that contain only the initial key variables. To this end, we introduce a system of equations that naturally arises in the AES, and then eliminate all the intermediate variables via normal form reductions. The resulting system in key variables only is solved then. We also consider a possibility to apply our method in the meet-in-the-middle scenario especially with several plaintext/ciphertext pairs. We elaborate on the method further by looking for subsystems which contain fewer variables and are overdetermined, thus facilitating solving the large system.

ePrint: https://eprint.iacr.org/2008/435

See all topics related to this paper.

Feel free to post resources that are related to this paper below.

Example resources include: implementations, explanation materials, talks, slides, links to previous discussions on other websites.

For more information, see the rules for Resource Topics .