Integral cryptanalysis, AES, symmetric key cryptology

Abstract

AES is the mostly used block cipher nowadays. At CRYPTO 2016, Sun et al. proposed the first 5-round distinguisher of the AES [19]. However, it is somewhat closely related with the keys and hardly be used to mount a key recovery attack. Later in FSE 2016 [12] and EUROCRYPT 2017 [13], the distinguisher was improved. In this paper, by combining the techniques proposed by Sun et al. at CRYPTO 2016, we find a new 3-round integral distinguisher of AES which is closely related with the round keys. Then, based on the new distinguisher, we develop new techniques and give a new integral cryptanalysis for the round-reduced AES. We believe this may give new insight on the security of the AES.