Volume 3, Number 2, 185-200, DOI: 10.1007/s11786-009-0020-y

Obtaining and Solving Systems of Equations in Key Variables Only for the Small Variants of AES

Stanislav Bulygin and Michael Brickenstein

From the issue entitled "Symbolic Computation and Cryptography"

View Related Documents

Abstract

This work is devoted to attacking the small scale variants of the Advanced Encryption Standard (AES) via systems that contain only the initial key variables. To this end, we investigate a system of equations that naturally arises in the AES, and then introduce an elimination of all the intermediate variables via normal form reductions. The resulting system in key variables only is solved then. We also consider a possibility to apply our method in the meet-in-the-middle scenario especially with several plaintext/ciphertext pairs. We elaborate on the method further by looking for subsystems which contain fewer variables and are overdetermined, thus facilitating solving the large system.

Keywords  Algebraic attack – Meet-in-the-middle attack – AES – Gröbner basis – Normal form

Mathematics Subject Classification (2000)  Cryptography 94A60 – Polynomial ideals, Gröbner bases 13P10

Fulltext Preview

Image of the first page of the fulltext document