This work is devoted to attacking the small scale variants of the Advanced Encryption Standard (AES) via systems that contain
only the initial key variables. To this end, we investigate a system of equations that naturally arises in the AES, and then
introduce an elimination of all the intermediate variables via normal form reductions. The resulting system in key variables
only is solved then. We also consider a possibility to apply our method in the meet-in-the-middle scenario especially with
several plaintext/ciphertext pairs. We elaborate on the method further by looking for subsystems which contain fewer variables
and are overdetermined, thus facilitating solving the large system.
Keywords Algebraic attack – Meet-in-the-middle attack – AES – Gröbner basis – Normal form
Mathematics Subject Classification (2000) Cryptography 94A60 – Polynomial ideals, Gröbner bases 13P10