DMCA
A collision attack on 7 rounds of Rijndael (2000)
| Venue: | In AES Candidate Conference |
| Citations: | 31 - 1 self |
BibTeX
@INPROCEEDINGS{Gilbert00acollision,
author = {Henri Gilbert and Marine Minier},
title = {A collision attack on 7 rounds of Rijndael},
booktitle = {In AES Candidate Conference},
year = {2000},
pages = {230--241}
}
Share
 |
 |
 |
 |
||
OpenURL
Abstract
Rijndael is one of the ¯ve candidate blockciphers selected by NIST for the ¯nal phase of the AES selection process. The best attack of Rijndael so far is due to the algorithm designers. This attack is based upon the existence of an e±cient distinguisher between 3 Rijndael inner rounds and a random permutation, and it is limited to 6 rounds for each of the three possible values of the keysize parameter (128 bits, 196 bits and 256 bits). In this paper, we construct an e±cient distinguisher between 4 inner rounds of Rijndael and a random permutation of the blocks space, by exploiting the existence of collisions between some partial functions in-duced by the cipher. We present an attack based upon this 4-rounds distinguisher that requires 232 chosen plaintexts and is applicable to up to 7-rounds for the 196 keybits and 256 keybits version of Rijndael. Since the minimal number of rounds in the Rijndael parameter settings proposed for AES is 10, our attack does not endanger the security of the cipher, indicate any °aw in the design or prove any inadequacy in selec-tion of number of rounds. The only claim we make is that our results represent improvements of the previously known cryptanalytic results on Rijndael.
Keyphrases
collision attack random permutation cient distinguisher nal phase inner round keysize parameter rijndael inner round possible value partial function rijndael parameter setting aes selection process algorithm designer 4-rounds distinguisher result represent improvement ve candidate blockciphers keybits version cryptanalytic result chosen plaintexts minimal number block space
