Skip to main content
Cryptography

Return to Question

Tweeted twitter.com/#!/StackCrypto/status/293886764819558400
Apparently this is what I really meant.
Link
Joe Z.
Joe Z.
  • 408
  • 2
  • 10

Is Does it hardtake brute force to find a pair of plaintext and ciphertext that each follow a certain condition, given an AES encryption key?

added 104 characters in body
Source Link
Joe Z.
Joe Z.
  • 408
  • 2
  • 10

Suppose that I have an AES key $K$, and I'm instructed to find a plaintext such that the first 32 bits of the plaintext are some string of bits $S_1$, and the last 32 bits of the ciphertext once the plaintext has been encrypted with $K$ are another string of bits $S_2$.

Is this difficult? Is there a known attack against this that's faster than just fixing one of the $S$'s and brute-force searching for a text with the other $S$?

Suppose that I have an AES key $K$, and I'm instructed to find a plaintext such that the first 32 bits of the plaintext are some string of bits $S_1$, and the last 32 bits of the ciphertext once the plaintext has been encrypted with $K$ are another string of bits $S_2$.

Is this difficult? Is there a known attack against this?

Suppose that I have an AES key $K$, and I'm instructed to find a plaintext such that the first 32 bits of the plaintext are some string of bits $S_1$, and the last 32 bits of the ciphertext once the plaintext has been encrypted with $K$ are another string of bits $S_2$.

Is this difficult? Is there a known attack against this that's faster than just fixing one of the $S$'s and brute-force searching for a text with the other $S$?

Source Link
Joe Z.
Joe Z.
  • 408
  • 2
  • 10

Is it hard to find a pair of plaintext and ciphertext that each follow a certain condition, given an AES key?

Suppose that I have an AES key $K$, and I'm instructed to find a plaintext such that the first 32 bits of the plaintext are some string of bits $S_1$, and the last 32 bits of the ciphertext once the plaintext has been encrypted with $K$ are another string of bits $S_2$.

Is this difficult? Is there a known attack against this?