Alternative Key Schedules for the AES - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2024

Alternative Key Schedules for the AES

Résumé

© The Author(s), under exclusive license to Springer Nature Switzerland AG 2024.The AES block cipher is today the most important and analyzed symmetric algorithm. While all versions of the AES are known to be secure in the single-key setting, this is not the case in the related-key scenario. In this article we try to answer the question whether the AES would resist better differential-like related-key attacks if the key schedule was different. For this, we search for alternative permutation-based key schedules by extending the work of Khoo et al. at ToSC 2017 and Derbez et al. at SAC 2018. We first show that the model of Derbez et al. was flawed. Then, we develop different approaches together with MILP-based tools to find good permutations that could be used as the key schedule for AES-128, AES-192 and AES-256. Our methods permitted to find permutations that outperform the permutation exhibited by Khoo et al. for AES-128. Moreover, our new approach based on two MILP models that call one another allowed us to handle a larger search space and thus to search for alternative key schedules for the two bigger versions of AES. This method permitted us to find permutations for AES-192 and AES-256 that provide better resistance to related-key differential attacks. Most importantly, we showed that these variants can resist full-round boomerang attacks.
Fichier non déposé

Dates et versions

hal-04683785 , version 1 (02-09-2024)

Identifiants

Citer

Christina Boura, Margot Funk, Patrick Derbez. Alternative Key Schedules for the AES. 22nd International Conference on Applied Cryptography and Network Security, ACNS 2024, Mar 2024, Abu Dhabi, United Arab Emirates. pp.485-506, ⟨10.1007/978-3-031-54773-7_19⟩. ⟨hal-04683785⟩
0 Consultations
0 Téléchargements

Altmetric

Partager

Gmail Mastodon Facebook X LinkedIn More