Differences

This shows you the differences between two versions of the page.

--- paes [17/03/2014 12:37:26]
mmeh created
+++ paes [25/03/2014 11:56:59]
stek
@@ Line 6: / Line 6: @@
 ===== Cryptanalysis =====
+^ Type     ^ Number of Queries  ^ Computations ^  Reference ^ Comment ^
+| Forgery  | $2^{11}$ | $2^{11}$ | Yu Sasaki and Lei Wang[(ref:caesar:cryptoeprint2014218)] | |
+Jérémy Jean and Ivica Nikolić describe a distinguisher for PAES in [[http://www1.spms.ntu.edu.sg/~syllab/m/images/6/6e/Using_AES_Round_Symmetries_to_Distinguish_PAES.pdf|this note]]. Independently, Markku-Juhani O. Saarinen reports issues with rotational invariants in PAES in [[https://groups.google.com/forum/#!topic/crypto-competitions/vRmJdRQBzOo|this thread]] that lead to distinguishing and key-recovery shortcuts.

Authenticated Encryption Zoo