I'm looking at a square attack against a reduced version of AES-128 with only 4 rounds (with block and key size of each 128 bit). I have a set of 256 plaintext-ciphertext block pairs.
What is the complexity of the computations, in number of encryptions, partial encryptions, memory usage, and data requested?