A General Proof Framework for Recent AES Distinguishers

  • Christina Boura Inria, Paris, France; University of Versailles Saint-Quentin-en-Yvelines (UVSQ) , Versailles, France
  • Anne Canteaut Inria, Paris, France
  • Daniel Coggia Direction Générale de l’Armement, Paris, France; Inria, Paris, France
Keywords: AES, Distinguisher, Subspace Trail Cryptanalysis


In this paper, a new framework is developed for proving and adapting the recently proposed multiple-of-8 property and mixture-differential distinguishers. The above properties are formulated as immediate consequences of an equivalence relation on the input pairs, under which the difference at the output of the round function is invariant. This approach provides a further understanding of these newly developed distinguishers. For example, it clearly shows that the branch number of the linear layer does not influence the validity of the property, on the contrary of what was previously believed. We further provide an extension of the mixture-differential distinguishers and multiple-of-8 property to any SPN and to a larger class of subspaces. These adapted properties can then be exhibited in a systematic way for other ciphers than the AES. We illustrate this with the examples of Midori, Klein, LED and Skinny.

How to Cite
Boura, C., Canteaut, A., & Coggia, D. (2019). A General Proof Framework for Recent AES Distinguishers. IACR Transactions on Symmetric Cryptology, 2019(1), 170-191. https://doi.org/10.13154/tosc.v2019.i1.170-191