Movatterモバイル変換

• Liu ZHANG

  School of Cyber Engineering, Xidian University
  State Key Laboratory of Cryptology

• Zilong WANG

  School of Cyber Engineering, Xidian University
  State Key Laboratory of Cryptology

• Jinyu LU

  College of Sciences, National University of Defense Technology

Based on the framework of a multi-stage key recovery attack for a large block cipher, 2 and 3-round differential-neural distinguishers were trained for AES using partial ciphertext bits. The study introduces the differential characteristics employed for the 2-round ciphertext pairs and explores the reasons behind the near 100% accuracy of the 2-round differential neural distinguisher. Utilizing the trained 2-round distinguisher, the 3-round subkey of AES is successfully recovered through a multi-stage key guessing. Additionally, a complexity analysis of the attack is provided, validating the effectiveness of the proposed method.