# Attacking a hardware AES implementation if it leaks the intermediate round states

Let's say that we have a hardware AES implementation that, on request, will encrypt or decrypt a 16-byte block of data in ECB mode using a fixed key, but refuses to reveal its fixed key. In other words, an oracle.

This oracle has a flaw: if you read the hardware's output registers before the device says that its output is ready, it will return the result of the intermediate rounds rather than only the 10th (final) round.

Is it possible to attack this system to go after the embedded key? I suppose that this means my question is about chosen-plaintext attacks against reduced-round variants of Rijndael-128.

-
I'd say the practical application depends on whether you can obtain states of consecutive rounds. If you can, key extraction seems quite trivial as it boils down to re-doing $SubBytes$, $ShiftRows$, $MixColumns$, and then computing round key by reversing $AddRoundKey$ transformation. –  Andrey Aug 18 '14 at 7:44