Are their any attacks on AES (any mode) in which before the attack is mounted, the adversary is aware that the input distribution is non-uniform? Most of the work assume that the plaintext is uniformly distributed. This is with reference to the following paper- https://eprint.iacr.org/2019/491.pdf

  • 4
    $\begingroup$ Usually there is no assumption that the plaintext is distributed in any way. Definitely not in the standard definitions. $\endgroup$ Dec 16, 2022 at 10:26
  • $\begingroup$ Many authors assume that the plaintext is uniformly distributed. Please find the link below: eprint.iacr.org/2019/491.pdf $\endgroup$
    – nivedita
    Dec 16, 2022 at 12:59
  • $\begingroup$ @nivedita: You have linked a single article. Why are you saying "many authors assume..."? $\endgroup$
    – mentallurg
    Dec 16, 2022 at 23:34
  • $\begingroup$ @nivedita I'm not familiar with side channel analysis. However, in cryptography, AES is supposed to be secure against chosen message attacks. This implies that the plaintext is chosen by an adversary. And an adversary may choose any plaintext it wishes, and may sample from any distribution it likes. Also in the real world, plaintexts are definitely not uniform. (E.g, if its english the letter t is more common that z). So plaintext being uniform is not usually a reasonable assumption. $\endgroup$ Dec 16, 2022 at 23:45


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.