[12536] in cryptography@c2.net mail archive
AES-128 keys unique for fixed plaintext/ciphertext pair?
daemon@ATHENA.MIT.EDU (Ralf-Philipp Weinmann)
Mon Feb 17 14:25:44 2003
X-Original-To: cryptography@wasabisystems.com
X-Original-To: cryptography@wasabisystems.com
Date: Mon, 17 Feb 2003 14:06:51 +0100
From: Ralf-Philipp Weinmann <ralf@fimaluka.org>
To: cryptography@wasabisystems.com
I was wondering whether the following is true:
"For each AES-128 plaintext/ciphertext (c,p) pair there
exists exactly one key k such that c=AES-128-Encrypt(p, k)."
Of course we can look at the generalized case of Rijndael
with block size == key size and ask the same question. I'd
be happy with an answer for AES-128 nonetheless.
At first I thought this was a trivial question since the round
function minus AddRoundKey is bijective. But I haven't been
able to come up with anything thus far, so I thought I'd
ask the list.
Any ideas?
Cheers,
Ralf
p.s.: I am familiar with Wernsdorf's paper, but it hasn't
helped me thus far.
---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo@wasabisystems.com
