I know that AES is secure against KPA. However, is it possible to generate a complete list of all possible keys that will work for a given block? If so, how?


marked as duplicate by Ilmari Karonen, otus, e-sushi May 14 '17 at 10:00

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

  • 1
    $\begingroup$ Define 'will work'. Naively I think all keys will 'work' in the sense you can encrypt or decrypt with them, and by doing so you can generate every possible 128-bit output from the same input block. $\endgroup$ – Rup May 13 '17 at 23:13
  • $\begingroup$ At least related: For a given plaintext-ciphertext pair, how many valid AES keys are there? $\endgroup$ – otus May 14 '17 at 7:49