How can we attack by using chosen plaintext attack (and which plaintext should we choose) if AES didnt have the ShiftRow and Mixcolumn layers. I know each byte would be independent in the 16 byte scheme but couldnt figure out a way to attack.

  • $\begingroup$ Think of ECB... $\endgroup$
    – Biv
    Commented Nov 1, 2017 at 10:36
  • $\begingroup$ @Biv where each of the 16 bytes in a block have a different transformation. $\endgroup$
    – DannyNiu
    Commented Nov 1, 2017 at 10:47
  • $\begingroup$ @DannyNiu A different transformation sure, but this time you can enumerate all the possible mappings ... ;) $\endgroup$
    – Biv
    Commented Nov 1, 2017 at 10:50
  • $\begingroup$ related crypto.stackexchange.com/questions/34928/… $\endgroup$ Commented Nov 2, 2017 at 1:15

1 Answer 1


After the key expansion, there would be 16 different mappings for each of the 16 bytes in a block.

Suppose we are attacking the block cipher itself (in ECB mode), with each byte having 256 different values, we can query 256 ciphertext blocks (all-bytes-0, all-bytes-1, ... all-bytes-255) to get the exact plaintext-to-ciphertext mapping for all 16 bytes's 256 values.

To decrypt future blocks, you just need to have a 16x256=4096 byte (1 memory page) table of the inverse map which you can easily create now.


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.