4 ms·
Interestingly with regard to (2), there is actually a (totally impractical) attack on AES that only affects the larger key 192 and 256-bit versions and not 128-
by tcoppi 14y ago
Interestingly with regard to (2), there is actually a (totally impractical) attack on AES that only affects the larger key 192 and 256-bit versions and not 128-bit AES - http://eprint.iacr.org/2009/317 http://eprint.iacr.org/2009/317
- kzrdude 14y agoDoes that mean that AES-256 is 'broken' in crypto terms?
- debacle 14y agoNo.
- kzrdude 14y agoWikipedia _does_ put AES inside Category:Broken block ciphers.. "Widely cryptanalysed ciphers like Advanced Encryption Standard are considered stronger than un-cryptanalysed ciphers even if there are impractical attacks against them."
- finnw 14y agoIt means that if you generate a series of keys by simply incrementing a counter, your 192- and 256-bit keys will be cracked before my 128-bit key. But if you are generating keys that way, you should probably be more concerned about attacks against the RNG that generated the starting key.