New Integral Distinguisher for Rijndael-256.
Yuechuan Wei, Bing Sun, Chao Li · 2009
Abstract. The known 3-round distinguisher of Rijndael-256 is byteoriented and 2 8 plaintexts are needed to distinguish 3-round Rijndael from a random permutation. In this paper, we consider the influence of the order of the plaintexts and present a new 3-round distinguisher which only needs 32 plaintexts. Key words: block cipher, integral attack, Rijndael-256 1