Single key recovery attacks on reduced AES-192 and Kalyna-128/256

摘要

＜正＞Dear editor,We re-evaluate the securities of reduced AES-192and Kalyna-128/256 against key recovery attack in the single-key model.The meet-in-the-middle attack（MIMT）was first introduced into the analysis of AES by Demirci and Sel?cuk[1]at FSE2008.The main idea was to set up a precomputation table for an ordered sequence of values.Later,ref.[2]showed that the storage of this table could be further reduced if one considered the