Let's say I have a plaintext, the corresponding ciphertext encrypted using AES-XTS, and the initialization vectors. Is there any way - not brute force, of course - to compute the key?

Even if there's no known way, feel free to share articles on the subject

  • 5
    $\begingroup$ There is no known efficient key-recovery attack against AES, no matter the mode of operation. $\endgroup$ Apr 12 '15 at 12:32
  • 1
    $\begingroup$ All known ways to obtain the key require more input; like, the power consumption over time of the device that performed the computation. $\endgroup$
    – fgrieu
    Apr 12 '15 at 12:34
  • $\begingroup$ Ah, I just stumbled upon crypto.stackexchange.com/questions/3952/… - sorry for the duplicate! Thanks for the answers $\endgroup$
    – kiv
    Apr 12 '15 at 12:40

Browse other questions tagged or ask your own question.