Skip to main content
2 of 2
better title, rewording, tags
Paŭlo Ebermann
  • 22.8k
  • 7
  • 81
  • 118

What is the complexity of the Square attack against the reduced 4-rounds 128-bit Rijndael variant?

I'm looking at a square attack against a reduced version of AES-128 with only 4 rounds (with block and key size of each 128 bit). I have a set of 256 plaintext-ciphertext block pairs.

What is the complexity of the computations, in number of encryptions, partial encryptions, memory usage, and data requested?

Mviki
  • 31
  • 2