Paper 2019/141

A General Proof Framework for Recent AES Distinguishers

Christina Boura, Anne Canteaut, and Daniel Coggia


In this paper, a new framework is developed for proving and adapting the recently proposed multiple-of-8 property and mixture-differential distinguishers. The above properties are formulated as immediate consequences of an equivalence relation on the input pairs, under which the difference at the output of the round function is invariant. This approach provides a further understanding of these newly developed distinguishers. For example, it clearly shows that the branch number of the linear layer does not influence the validity of the property, on the contrary of what was previously believed. We further provide an extension of the mixture-differential distinguishers and multiple-of-8 property to any SPN and to a larger class of subspaces. These adapted properties can then be exhibited in a systematic way for other ciphers than the AES. We illustrate this with the examples of Midori, Klein, LED and Skinny.

Available format(s)
Publication info
Published by the IACR in TOSC 2019 ISSUE 1
AESDistinguisherSubspace Trail Cryptanalysis
Contact author(s)
anne canteaut @ inria fr
christina boura @ uvsq fr
daniel coggia @ inria fr
2019-02-14: received
Short URL
Creative Commons Attribution


      author = {Christina Boura and Anne Canteaut and Daniel Coggia},
      title = {A General Proof Framework for Recent {AES} Distinguishers},
      howpublished = {Cryptology ePrint Archive, Paper 2019/141},
      year = {2019},
      note = {\url{}},
      url = {}
Note: In order to protect the privacy of readers, does not use cookies or embedded third party content.