Induce random fault (non-zero) error in one byte before MixColumns in Round 9

I get last round key with 32 bit (4 bytes) missing (Missing are bytes 1, 8, 11, 14)

How can I recover these key bytes without the need of computing 2^32 keys

  • 5
    $\begingroup$ Why are you afraid of letting your computer do some work? 4 billion isn't that much... $\endgroup$ – Maarten Bodewes Jan 23 '18 at 0:24
  • $\begingroup$ any reference to the paper or technique you are implementing? $\endgroup$ – khan Feb 27 at 18:39

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.