AES Variants Secure against Related-Key Differential and Boomerang Attacks

Abstract

In this paper, we present a framework for protection against the recent related-key differential and boomerang attacks on AES by Biryukov et al. Then we study an alternative AES key schedule proposed by May et al. at ACISP 2002 as a possible candidate to protect against these related key attacks. We find that there exist equivalent keys for this key schedule and in response, we propose an improvement to overcome this weakness. We proceed to prove, using our framework, that our improved May et al.’s key schedule is secure against related-key differential and boomerang attacks. Since May et al.’s key schedule is not on-the-fly (which is a requirement for some hardware implementations), we propose an on-the-fly AES key schedule that is resistant against related-key differential and boomerang attacks.KeywordsRelated-key attacksdifferential cryptanalysisboomerang attacksAES key schedule