Are their any attacks on AES (any mode) in which before the attack is mounted, the adversary is aware that the input distribution is non-uniform? Most of the work assume that the plaintext is uniformly distributed. This is with reference to the following paper- https://eprint.iacr.org/2019/491.pdf
4
-
4$\begingroup$ Usually there is no assumption that the plaintext is distributed in any way. Definitely not in the standard definitions. $\endgroup$– miraunpajaroCommented Dec 16, 2022 at 10:26
-
$\begingroup$ Many authors assume that the plaintext is uniformly distributed. Please find the link below: eprint.iacr.org/2019/491.pdf $\endgroup$– niveditaCommented Dec 16, 2022 at 12:59
-
$\begingroup$ @nivedita: You have linked a single article. Why are you saying "many authors assume..."? $\endgroup$– mentallurgCommented Dec 16, 2022 at 23:34
-
$\begingroup$ @nivedita I'm not familiar with side channel analysis. However, in cryptography, AES is supposed to be secure against chosen message attacks. This implies that the plaintext is chosen by an adversary. And an adversary may choose any plaintext it wishes, and may sample from any distribution it likes. Also in the real world, plaintexts are definitely not uniform. (E.g, if its english the letter t is more common that z). So plaintext being uniform is not usually a reasonable assumption. $\endgroup$– miraunpajaroCommented Dec 16, 2022 at 23:45
Add a comment
|