But this http://eprint.iacr.org/2009/317 (mentioned by the German Wikipedia
article for AES) claims that AES-256 was down to 99.5 bits.
If memory serves that's a related-key attack.
(Hmm. When you've gotten to the point where you can recognize
academic papers by their URLs, maybe that's a sign you need to get a
hobby... sigh. Time to take up needlepoint, I guess.)
Anyway. Although there's some really neat theoretical cryptanalysis
against AES-256, in reality AES-256 is as solid as the Rock of
Gibraltar.
_______________________________________________
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users
