Improving Integral Attacks Against Rijndael-256 Up to 9 Rounds

摘要: Rijndael is a block cipher designed by V. Rijmen and J. Daemen it was chosen in its 128-bit version as AES the NIST October 2000. Three key lengths - 128, 192 or 256 bits are allowed. In original contribution describing [4], two other versions have been described: Rijndael-256 Rijndael-192 that respectively use plaintext blocks of length under same discarded NIST. This paper presents an efficient distinguisher between 4 inner rounds Rijndael- random permutation space, exploiting existence semi-bijective Integral properties induced cipher. We then present three attacks based upon against 7, 8 9 using extensions proposed N. ferguson et al. [6]. The best cryptanalysis presented here works 192-bit requires 2128 2119 plaintexts 2188 encryptions.