Advances in Cryptology – ASIACRYPT 2007

Volume 4833 of the series Lecture Notes in Computer Science pp 315-324

Known-Key Distinguishers for Some Block Ciphers

  • Lars R. KnudsenAffiliated withTechnical University of Denmark, Department of Mathematics, Building 303S, DK-2800 Lyngby
  • , Vincent RijmenAffiliated withGraz University of Technology, Institute for Applied Information Processing and Communications, Inffeldgasse 16a, A-8010 Graz


We present two block cipher distinguishers in a setting where the attacker knows the key. One is a distinguisher for AES reduced the seven rounds. The second is a distinguisher for a class of Feistel ciphers with seven rounds. This setting is quite different from traditional settings. We present an open problem: the definition of a new notion of security that covers attacks like the ones we present here, but not more.


Block Cipher Cryptanalysis Distinguishing algorithms AES Feistel ciphers