Distinguisher and related-key attack on the full AES-256 (2009)

by A Biryukov, D Khovratovich, I Nikolic
Venue:CRYPTO 2009, volume 5677 of LNCS