Timeline for What are the best known cryptanalytic attacks against AES-128 with 9 rounds?
Current License: CC BY-SA 4.0
8 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jan 16, 2023 at 18:15 | vote | accept | xhuliano | ||
| Jan 10, 2023 at 0:59 | comment | added | user104975 | @forest I see. Thank you. | |
| Jan 10, 2023 at 0:33 | comment | added | forest | Any reduced-round attack is an attack against a reduced-round variant of an algorithm, not the full algorithm. It provides insight into the cipher's security, but an attack that works against N-1 rounds of a cipher with N rounds is not an attack against the full cipher. Also note that not all attacks are practical. There are attacks against the full 14 rounds of AES-256, but they're not much better than brute force. Likewise there are also "impossible differential attacks" which are performed against a cipher with a certain internal state that has a probability of 0 of actually existing. | |
| Jan 10, 2023 at 0:22 | comment | added | user104975 | @forest Thanks for the clarification! Have any reduced-round cryptanalysis attempts resulted in a successful (theoretical) attack? | |
| Jan 9, 2023 at 2:20 | history | edited | forest | CC BY-SA 4.0 |
capitalize I
|
| Jan 9, 2023 at 2:04 | comment | added | forest | Attacks against reduced-round versions of iterative ciphers isn't an attempt to see if a reduced-round version is secure enough to actually use. It's about determining the security margin of a cipher and trying to adapt attacks to more rounds. | |
| S Jan 8, 2023 at 22:04 | review | First answers | |||
| Jan 9, 2023 at 2:20 | |||||
| S Jan 8, 2023 at 22:04 | history | answered | user104975 | CC BY-SA 4.0 |