Distinguisher and Related-Key Attack on the Full AES-256 (2009)

by Alex Biryukov, Dmitry Khovratovich, Ivica Nikolic
Venue:Advances in Cryptography, proceedings of CRYPTO 2009, Lecture Notes in Computer Science 5677