[TLS] A new AI-discovered attack on 7-round AES (commentarie s by Orr Dunkelman and D. J. Bernstein)

Ken Kubota <[email protected]> Wed, 29 Jul 2026 14:58:08 +0200
Newsgroups gmane.ietf.tls
Message-ID <[email protected]>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