How can we attack by using chosen plaintext attack (and which plaintext should we choose) if AES didnt have the ShiftRow and Mixcolumn layers. I know each byte would be independent in the 16 byte scheme but couldnt figure out a way to attack.

  • $\begingroup$ Think of ECB... $\endgroup$ – Biv Nov 1 '17 at 10:36
  • $\begingroup$ @Biv where each of the 16 bytes in a block have a different transformation. $\endgroup$ – DannyNiu Nov 1 '17 at 10:47
  • $\begingroup$ @DannyNiu A different transformation sure, but this time you can enumerate all the possible mappings ... ;) $\endgroup$ – Biv Nov 1 '17 at 10:50
  • $\begingroup$ related crypto.stackexchange.com/questions/34928/… $\endgroup$ – Richie Frame Nov 2 '17 at 1:15

After the key expansion, there would be 16 different mappings for each of the 16 bytes in a block.

Suppose we are attacking the block cipher itself (in ECB mode), with each byte having 256 different values, we can query 256 ciphertext blocks (all-bytes-0, all-bytes-1, ... all-bytes-255) to get the exact plaintext-to-ciphertext mapping for all 16 bytes's 256 values.

To decrypt future blocks, you just need to have a 16x256=4096 byte (1 memory page) table of the inverse map which you can easily create now.


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.