Best Attacks

• Many attacks use the byte structure (“square attacks”)

• Attacking Rijndael with 128 bit key and 10 rounds

  • 5 rounds are easy
  • 6 rounds possible (232 pairs)
  • 7 rounds “only” theoretical

• Rijndael 192 key length : 8 from12

• Rijndael 256 key length : 9 from 14 Lucks /Weis, “Der DES Nachfolger Rijndael”, DuD 12/00 (in German)