First cryptanalysis of the full AES

The Advanced Encryption Standard (AES) is one of the most popular ciphers in the world and is widely used for both commercial and government purposes. Since it became a standard in 2001, the progress in its cryptanalysis has been very slow. Even the best attacks, which exist only on reduced versions, were impractical. New attacks are based on ideas from the cryptanalysis of hash functions. We show how the principle of local collisions exhibits non-tivial properties of the full cipher, and how an optimal attack can be explained as a codeword in the linear key schedule . We present a wide range of attacks: from a pure theoretical boomerang to a practical weakness in the ideal-cipher model, which can be demonstrated on a PC