The Exchange Attack: How to Distinguish Six Rounds of AES with 2^88.2 Chosen Plaintexts.

Navid Ghaedi Bardeh, Sondre Rnjom

Browse the full ASIACRYPT paper archive.