On integral distinguishers of Rijndael family of ciphers

Marine Minier, Raphael C.W. Phan, Benjamin Pousse

Research output: Contribution to journalArticleResearchpeer-review

4 Citations (Scopus)


The Rijndael family of ciphers was designed by Daemen and Rijmen for the AES competition. Let each member be Rijndael b, where b ∈ {128, 160, 192, 224, 256} denotes the block size. The current AES standard is Rijndael 128, for key sizes of 128, 192, and 256 bits. This paper treats the integral cryptanalysis of Rijndael b, notably for b ∈ {160, 192, 224, 256}. Integral cryptanalysis (in its basic form, first known in folklore as the Square attack) is unique for the Rijndael context because it was first applied to the Rijndael predecessor Square. Integral attacks were also the only and best known attacks on reduced round Rijndael found by its designers and explicitly described within its specification document.

Original languageEnglish
Pages (from-to)104-118
Number of pages15
Issue number2
Publication statusPublished - Apr 2012
Externally publishedYes


  • block ciphers
  • distinguishers
  • integral cryptanalysis
  • Rijndael

Cite this