Starting from uniformly random generated AES master key, is there a reference that prove that an specific roundkey can be considered as uniformly random generated as well ?
- Anybody can ask a question
- Anybody can answer
- The best answers are voted up and rise to the top
Actually, that's remarkably easy to show. The AES key scheduling logic is invertible:
Because that is a 1:1 mapping because the master key, and the 128/192/256 round key bits, then if the master key is selected uniformly, so must the round key bits be.