Key Recovery Attacks of Practical Complexity on AES-256 Variants with up to 10 Rounds.

Alex Biryukov, Orr Dunkelman, Nathan Keller, Dmitry Khovratovich, Adi Shamir

Browse the full EuroCrypt paper archive.