The relation between cyclic shift structure and Rijndaels safety
Duo Lei · Journal of China Institute of Communications · 2003
The best-known attack against Rijndael is still the one presented by the designers called Square attack. In the paper [1], the author said Square attack is s a chosen plaintext attack and is independent of the specific choices of ByteSub, the multiplication polynomial of MixColumn and the key schedule. In this paper we present a new kind of attack called inverse Square attack, which is a kind of chosen cipher text attack and better than Square attack. This paper also show that if only the moving direction of the ShiftRow transformation or key schedules RotByte transformation be inversed, the complexity of our attack will be 28 factor bellow than the Square attack.