[TLS] Re: [Ssh] A new AI-discovered attack on 7-round AE S (commentaries by Orr Dunkelman and D. J. Bernstein)

Jan Schermer <[email protected]> Wed, 29 Jul 2026 15:08:00 +0200
Newsgroups gmane.ietf.tls
Message-ID <[email protected]>
SXNuJ3QgdGhpcyBhIHJlZCBoZXJyaW5nPyBZb3UgY29tcGxldGVseSBtaXNzZWQgdGhlIHBhcnQg
d2hlcmUgdGhleSBhdHRhY2tlZCBIQVdLIChQUUMgZmluYWxpc3QpLCBfVEhBVF8gaXMgd2hhdCBp
bGx1c3RyYXRlcyB0aGUgcG9pbnQuIE5vYm9keSBjYXJlcyBhYm91dCA3LXJvdW5kIEFFUy4NCg0K
SmFuDQoNCg0KPiBPbiAyOS4gNy4gMjAyNiwgYXQgMTQ6NTgsIEtlbiBLdWJvdGEgPGlldGZAa2Vu
a3Vib3RhLmRlPiB3cm90ZToNCj4gDQo+IE9uIGJvdGggT3JyIER1bmtlbG1hbidzIFsxXSAoVExT
IGxpc3QpIGFuZCBELiBKLiBCZXJuc3RlaW4ncyBjb21tZW50YXJ5IFsyXSAoU1NIIGxpc3QpIHJl
Z2FyZGluZyB0aGUgbmV3IEFJLWdlbmVyYXRlZCBhdHRhY2sgb24gNy1yb3VuZCBBRVMgWzMsIDQs
IDVdOg0KPiANCj4gDQo+ICJXaGlsZSB0aGlzIGlzIHRoZSBmaXJzdCBpbXByb3ZlbWVudCBpbiBh
dHRhY2tpbmcgNy1yb3VuZCBBRVMgaW4gdGhlIGxhc3QNCj4gZGVjYWRlLCBpZiB5b3Ugd2VyZSBu
b3Qgd29ycmllZCBieSB0aGUgc2VyaWVzIG9mIHBhcGVycyB0aGF0IHJlZHVjZWQgdGhlDQo+IHNl
Y3VyaXR5IG9mIDUtcm91bmQgQUVTIGZyb20gMl4zMiB0byAyXjE2LCBvciB0aGUgc29tZXdoYXQg
aW1wcm92ZWQgYXR0YWNrcw0KPiBvbiA2LXJvdW5kIEFFUywgdGhlbiB5b3Ugc2hvdWxkIG5vdCBy
ZWFsbHkgd29ycnkgbm93IFt0XW8gc3RhcnQgYSBwcm9jZWR1cmUNCj4gZm9yIGNoYW5naW5nIDEw
LXJvdW5kIEFFUyAoZm9yIDEyOC1iaXQga2V5KSBmb3Igc29tZXRoaW5nIGVsc2UsIHdoZW4gdGhl
cmUNCj4gYXJlIG5vIGF0dGFja3Mgb24gOC1yb3VuZCBBRVMtMTI4LiIgWzFdDQo+IA0KPiBUaGlz
IG92ZXJsb29rcyB0aGUgdmVyeSBwb2ludCB0aGF0IEFudGhyb3BpYyByZXNlYXJjaGVycyBlbXBo
YXNpemUgdGhlbXNlbHZlczoNCj4gDQo+ICJBbmQgaW4gdGhlIGNhc2Ugb2YgQUVTLCBvdXIgYXR0
YWNrIGV4dGVuZHMgYSBsb25nIGxpbmUgb2Ygd29yayB0aGF0IGhhZCBwcmV2aW91c2x5IHN1Y2Nl
ZWRlZCBhdCBhdHRhY2tpbmcgcmVkdWNlZC1yb3VuZCB2YXJpYW50cy4gQnV0IHdlIHNob3VsZCBu
b3QgYXNzdW1lIHRoYXQgbGFuZ3VhZ2UgbW9kZWwgY2FwYWJpbGl0aWVzIHdpbGwgcGxhdGVhdSBh
dCB0aGlzIGxldmVsLiBJbiBqdXN0IG9uZSB5ZWFyLCBsYW5ndWFnZSBtb2RlbHMgaGF2ZSBnb25l
IGZyb20gYmVpbmcgdW5hYmxlIHRvIHBlcmZvcm0gY3J5cHRhbmFseXNpcyBvZiBldmVuIHRoZSBt
b3N0IGJhc2ljIGNpcGhlcnMgdG8gYmVpbmcgY2FwYWJsZSBvZiBmaW5kaW5nIGZsYXdzIGluIGNy
eXB0b2dyYXBoaWMgZGVzaWducyB0aGF0IGhhdmUgZXNjYXBlZCBkaXNjb3ZlcnkgZGVzcGl0ZSB5
ZWFycyBvZiBodW1hbiBleHBlcnQgcmV2aWV3LiIgWzNdDQo+ICJCdXQgYXMgd2UgZGV2ZWxvcCBp
bmNyZWFzaW5nbHkgcG93ZXJmdWwgY3J5cHRhbmFseXRpYyByZXN1bHRzLCBpdCB3b3VsZCBiZSBw
cnVkZW50IHRvIGNvbnNpZGVyIGhvdyByZXNlYXJjaGVycyBzaG91bGQgcmVhY3QgaWYgYSBsYW5n
dWFnZSBtb2RlbCB3ZXJlIHRvIGRpc2NvdmVyIHZ1bG5lcmFiaWxpdGllcyBpbiBjcnlwdG9zeXN0
ZW1zIHdoZXJlIGF0dGFja3MgZG8gaGF2ZSBhbiBpbW1lZGlhdGUgcmVhbC13b3JsZCBpbXBhY3Qu
IiBbM10NCj4gDQo+IFRoZSBwb2ludCBpcyBub3QgdGhlIG5ldyBhdHRhY2sgb24gNy1yb3VuZCBB
RVMsIGJ1dCB0aGUgdmVyeSBmYWN0IHRoYXQgdGhlIG5ldyBhdHRhY2sgd2FzIEFJLWdlbmVyYXRl
ZCwgYW5kIHRoZSBzcGVlZCBvZiBzdWNoIGRldmVsb3BtZW50cyBtaWdodCBpbmNyZWFzZS4NCj4g
V2hpbGUgdGhpcyBpcyBwcm9iYWJseSB0aGUgZmlyc3Qgc3VjaCBncm91bmRicmVha2luZyByZXNl
YXJjaCByZXN1bHQgY3JlYXRlZCBieSBBSSwgaW4gaGFsZiBhIHllYXIgdGhlcmUgbWlnaHQgYmUg
MTAgc3VjaCBwYXBlcnMsIGFuZCBpbiBhbm90aGVyIGhhbGYgYSB5ZWFyIDEwMCBwYXBlcnMsIGV0
Yy4sIGluIG90aGVyIHdvcmRzLCBhIHF1YWxpdGF0aXZlbHkgX25ldyBwYXJhZGlnbV8gb2Ygc2Np
ZW50aWZpYyBwcm9ncmVzcywgd2hpY2ggaXMgbm90IGFkZHJlc3NlZCBieSBmb2N1c2luZyBvbiB0
aGUgbnVtYmVyIG9mIHJvdW5kcy4NCj4gDQo+IEJyaWFuIEJlcmxldGljIHByZWRpY3RlZCBBSSBk
ZXZlbG9wbWVudCB3aXRoIF9leHBvbmVudGlhbGx5XyBncm93aW5nIHNwZWVkIGFscmVhZHkgYWJv
dXQgaGFsZiBhIHllYXIgYWdvOg0KPiANCj4gIlRoZXJlIGFyZSBwZW9wbGUgdGhhdCBkb24ndCBl
dmVuIHdhbnQgdG8gYWNrbm93bGVkZ2UgdGhhdCBBSSBpcyBhIHJlYWwgdGhpbmcgdGhhdCBleGlz
dHMgYW5kIGlzIHNwZWVkaW5nIGZvcndhcmQuIEFuZCBpdCdzIG5vdCBqdXN0IHNwZWVkaW5nIGZv
cndhcmQgaW4gYSBsaW5lYXIgd2F5LiBJdCBpcyBleHBvbmVudGlhbGx5IGluY3JlYXNpbmcuIFlv
dSBjYW4gc2VlIGl0LiBCZWZvcmUgaXQgd2FzIGxlYXBzIGFuZCBib3VuZHMgeWVhciB0byB5ZWFy
LiBOb3cgaXQgaXMgbGVhcHMgYW5kIGJvdW5kcyBtb250aCB0byBtb250aCBldmVuIHNvbWV0aW1l
cyB3ZWVrIHRvIHdlZWsuIiBbNl0NCj4gDQo+IA0KPiAiR2l2ZW4gdGhpcyByaXNrLCBpdCdzIHBh
cnRpY3VsYXJseSBkYW5nZXJvdXMgaWYgd2UgYWxsb3cgdGhlIHB1cnN1aXQgb2YNCj4gZXZlcnkg
bGFzdCBiaXQgb2YgcGVyZm9ybWFuY2UgdG8gc3RyaXAgY3J5cHRvZ3JhcGh5IGRvd24gdG8gdGhl
IGJhcmUNCj4gbWluaW11bSB0aGF0IHJlc2lzdHMgYXR0YWNrIGRlbW9zLiBJdCdzIG11Y2ggc2Fm
ZXIgdG8gaW5jbHVkZSBkZWZlbnNlIGluDQo+IGRlcHRoOiBmb3IgZXhhbXBsZSwgMjU2LWJpdCBj
aXBoZXIga2V5cywgbWFueSBtb3JlIGNpcGhlciByb3VuZHMgdGhhbiB3ZQ0KPiBrbm93IGhvdyB0
byBicmVhayAodGhlIGNsYXNzaWMgcmVjb21tZW5kYXRpb24gZnJvbSBBbmRlcnNvbiwgQmloYW0s
IGFuZA0KPiBLbnVkc2VuIGlzIHR3aWNlIGFzIG1hbnkgcm91bmRzKSwgYW5kIGNvbnRpbnVpbmcg
dG8gc2lnbiB3aXRoIEVDQyB3aGVuDQo+IHdlIGFkZCBQUSBzaWduYXR1cmVzLiIgWzJdDQo+IA0K
PiBXaGlsZQ0KPiAtIHR3aWNlIGFzIG1hbnkgcm91bmRzDQo+IC0gaHlicmlkIGFwcHJvYWNoIChl
LmcuLCBkb3VibGUgZW5jcnlwdGlvbikNCj4gYXJlIG9idmlvdXMgY29uY2x1c2lvbnMsDQo+ICIy
NTYtYml0IGNpcGhlciBrZXlzIiBzaG91bGQgYmUgcmVwbGFjZWQgYnkgIjI1NiBiaXRzIG9mIHNl
Y3VyaXR5IiBmb3IgbG9uZy10ZXJtIHNlY3VyaXR5Lg0KPiANCj4gV2l0aCBHcm92ZXIncyBhbGdv
cml0aG0gaW4gcXVhbnR1bSBjb21wdXRpbmcgdGhhdCBpbiB0aGUgZnV0dXJlIG1pZ2h0IGhhbHZl
IHRoZSBlZmZlY3RpdmUgc2VjdXJpdHksIHRoZW9yZXRpY2FsbHkgc3ltbWV0cmljIGtleSBsZW5n
dGhzIG9mIDUxMiBiaXRzIGNvdWxkIGJlIG5lY2Vzc2FyeS4NCj4gDQo+IEZvciBsb25nLXRlcm0g
c2VjdXJpdHksIGEgc2VjdXJpdHkgbWFyZ2luIHNob3VsZCBiZSBhZGRlZCB0aGF0IHRha2VzIGlu
dG8gYWNjb3VudCBzY2llbnRpZmljIHByb2dyZXNzIChlLmcuLCBuZXcgYXR0YWNrcyksIHRlY2hu
b2xvZ2ljYWwgcHJvZ3Jlc3MgKGUuZy4sIHF1YW50dW0gY29tcHV0aW5nLCBhcnRpZmljaWFsIGlu
dGVsbGlnZW5jZSksIHRoZSBpbnRlcmFjdGlvbiBiZXR3ZWVuIGJvdGggKHBvc3NpYmx5IGV4cG9u
ZW50aWFsbHkgaW5jcmVhc2luZyBzY2llbnRpZmljIHByb2dyZXNzIGR1ZSB0byBBSSkgYXMgd2Vs
bCBhcyBwb3RlbnRpYWwgd2Vha25lc3NlcyBpbiB0aGUgb3JpZ2luYWwgYWxnb3JpdGhtLg0KPiAN
Cj4gQ29uc2lkZXJpbmcgdGhhdCBzZWNyZXQgKG5hdGlvbi1zdGF0ZSkgcXVhbnR1bSBhdHRhY2tz
IG1heSBhbHJlYWR5IGhhcHBlbiBpbiAyMDI5IFs3LCA4XSwgZm9yIGEgcHJhZ21hdGljIGFkLWhv
YyBoeWJyaWQgc29sdXRpb24gZm9jdXNpbmcgb24gYXN5bW1ldHJpYyBtZXRob2RzIG1pZ2h0IGJl
IHN1ZmZpY2llbnQgKEdlcm1hbiBCU0k6ICJpdCBpcyBhZHZpc2FibGUgdG8gdXNlIGEga2V5IGxl
bmd0aCBvZiAyNTYgYml0cyBmb3IgdGhlIHN5bW1ldHJpYyBlbmNyeXB0aW9uIG1ldGhvZHMiIFs5
XSkuDQo+IA0KPiBGb3IgZGV2ZWxvcGluZyBuZXcgYWxnb3JpdGhtcywgaG93ZXZlciwgNTEyLWJp
dCBrZXlzIHNob3VsZCBiZSBlbnZpc2lvbmVkIGZvciB0aGUgc3ltbWV0cmljIGVuY3J5cHRpb24g
bWV0aG9kcy4NCj4gDQo+IFRoZSBoaXN0b3JpY2FsIGFuYWxvZ3kgbGllcyBpbiB0aGUgTlNBIGFu
ZCBDdXJ2ZSAyNTUxOS4NCj4gVGhlIE5TQSBpbiAyMDA1IGRlY2lkZWQgdG8gaW50ZXJuYWxseSB1
c2UgMjU2IGJpdHMgb2Ygc2VjdXJpdHkgZm9yIGxvbmctdGVybSBzZWN1cml0eSBbMTBdIChlLmcu
LCBDdXJ2ZSBQLTUyMSBbMTFdKS4NCj4gSW4gbXkgb3BpbmlvbiwgdGhpcyB3YXMgdGhlIGNvcnJl
Y3QgZGVjaXNpb24sIGFuZCBhIHdpc2UgZGVjaXNpb24uDQo+IA0KPiBXaGlsZSBDdXJ2ZSAyNTUx
OSBoYXMgZG9uZSBhIGdvb2Qgam9iLCBJIGFsd2F5cyByZWdyZXR0ZWQgaXQgb25seSBvZmZlcmVk
IDEyOCBiaXRzIG9mIHNlY3VyaXR5Lg0KPiBUaGlzIGxldmVsIG9mIDEyOCBiaXRzIG9mIHNlY3Vy
aXR5IHdhcyBkZXByZWNhdGVkIGJ5IHRoZSBOU0EgbW9yZSB0aGFuIGEgZGVjYWRlIGFnbyBbMTJd
Lg0KPiANCj4gT25lIHNob3VsZCBrZWVwIGluIG1pbmQgdGhhdCBsb25nLXRlcm0gc2VjdXJpdHkg
bWVhbnMgbW9yZSB0aGFuIGhvbGRpbmcgYSBmZXcgZGVjYWRlcy4NCj4gVGhlIHBlZGlhdHJpYyBy
ZWNvcmRzIG9mIGEgc2V2ZW4teWVhci1vbGQgY2hpbGQgc2hvdWxkbid0IGJlIGF2YWlsYWJsZSBv
biB0aGUgaW50ZXJuZXQgaWYgdGhlIHBlcnNvbiBpcyAzNywgNDcsIG9yIDU3IHllYXJzIG9sZCwg
d2l0aCBmdWxsIG5hbWUsIGJpcnRoZGF5LCBtYXliZSBldmVuIHBsYWNlIG9mIGJpcnRoICh3aGlj
aCB3b3VsZCBhbGxvdyBpZGVudGl0eSB0aGVmdCksIGJ1dCBhbHNvIGRpYWdub3NlcyB0aGF0IG1h
eSBzdGlsbCBiZSByZWxldmFudCB0aGVuLg0KPiANCj4gDQo+IEtpbmQgcmVnYXJkcywNCj4gDQo+
IEtlbiBLdWJvdGENCj4gDQo+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f
X19fX19fX19fX19fX18NCj4gDQo+IEtlbiBLdWJvdGENCj4gaHR0cHM6Ly9kb2kub3JnLzEwLjQ0
NDQvMTAwDQo+IA0KPiANCj4gDQo+IFsxXSBodHRwczovL21haWxhcmNoaXZlLmlldGYub3JnL2Fy
Y2gvbXNnL3Rscy9RdXN0aFJwNnpSQXhDdkltaUxMUTBTUUx0TUUvDQo+IA0KPiBbMl0gaHR0cHM6
Ly9tYWlsYXJjaGl2ZS5pZXRmLm9yZy9hcmNoL21zZy9zc2gvSEdUMm1US0M3dmk5bEhQZHBCdFFF
d3Q1N1NRLw0KPiANCj4gWzNdIGh0dHBzOi8vd3d3LmFudGhyb3BpYy5jb20vcmVzZWFyY2gvZGlz
Y292ZXJpbmctY3J5cHRvZ3JhcGhpYy13ZWFrbmVzc2VzDQo+IA0KPiBbNF0gaHR0cHM6Ly9hbnRo
cm9waWMuY29tL2RvY3VtZW50L2Flc19tb2JpdXNfYnJpZGdlLnBkZg0KPiANCj4gWzVdIGh0dHBz
Oi8vYW50aHJvcGljLmNvbS9kb2N1bWVudC9hZXNfbW9iaXVzX2JyaWRnZV9jb3QucGRmDQo+IA0K
PiBbNl0gaHR0cHM6Ly95b3V0dS5iZS90YmpzYWdzaVdscz90PTI1ODINCj4gDQo+IFs3XSBodHRw
czovL2NyLnlwLnRvL3RhbGtzLzIwMjMuMDYuMTUvc2xpZGVzLWRqYi0yMDIzMDYxNS1wcXJpc2st
NHgzLnBkZiwgcC4gNg0KPiANCj4gWzhdIGh0dHBzOi8veW91dHUuYmUvcVBob0pRdHZnVW8/dD03
NDANCj4gDQo+IFs5XSBodHRwczovL3d3dy5ic2kuYnVuZC5kZS9TaGFyZWREb2NzL0Rvd25sb2Fk
cy9FTi9CU0kvUHVibGljYXRpb25zL1RlY2hHdWlkZWxpbmVzL1RHMDIxMDIvQlNJLVRSLTAyMTAy
LTEucGRmP19fYmxvYj1wdWJsaWNhdGlvbkZpbGUmdj0xNCwgcC4gNDANCj4gIlRoZSBkZXZlbG9w
bWVudCBvZiBmYXVsdC10b2xlcmFudCBxdWFudHVtIGNvbXB1dGVycyBoYXMgYSBtdWNoIGxlc3Mg
c2V2ZXJlIGltcGFjdCBvbiB0aGUNCj4gc2VjdXJpdHkgb2Ygc3ltbWV0cmljIG1lY2hhbmlzbXMg
dGhhbiBvbiB0aGUgc2VjdXJpdHkgb2YgYXN5bW1ldHJpYyBtZWNoYW5pc21zLiBUaGUgdXNlIG9m
DQo+IEdyb3ZlcuKAmXMgYWxnb3JpdGhtIFs2MV0gY291bGQgdGhlb3JldGljYWxseSBhY2NlbGVy
YXRlIHRoZSBzZWFyY2ggb2YgdGhlIGtleSBzcGFjZSBvZiBzeW1tZXRyaWMNCj4gbWVjaGFuaXNt
cyBxdWFkcmF0aWNhbGx5LiBXaGV0aGVyIGFuIGFjY2VsZXJhdGlvbiBjb21wYXJlZCB0byBhIGNs
YXNzaWMgZXhoYXVzdGl2ZSBzZWFyY2ggb2YgdGhlDQo+IGtleSBzcGFjZSBjYW4gYWxzbyBiZSBh
Y2hpZXZlZCBpbiBwcmFjdGljZSBpcyB0aGUgc3ViamVjdCBvZiBjdXJyZW50IHJlc2VhcmNoLCBz
ZWUgZS5nLiBbNzZdLiBOZXZlci0NCj4gdGhlbGVzcywgZXNwZWNpYWxseSBmb3IgYXBwbGljYXRp
b25zIHdpdGggaGlnaCBvciBsb25nLXRlcm0gcHJvdGVjdGlvbiByZXF1aXJlbWVudHMgb3IgbG9u
Zy1saXZpbmcNCj4gc3lzdGVtcyBpdCBpcyBhZHZpc2FibGUgdG8gdXNlIGEga2V5IGxlbmd0aCBv
ZiAyNTYgYml0cyBmb3IgdGhlIHN5bW1ldHJpYyBlbmNyeXB0aW9uIG1ldGhvZHMNCj4gcmVjb21t
ZW5kZWQgYmVsb3cuIg0KPiANCj4gWzEwXSBodHRwczovL21haWxhcmNoaXZlLmlldGYub3JnL2Fy
Y2gvbXNnL3Rscy9sblNQaDNXcjZ2Z2RqaXZIR2oxbXhDdW4zUnMvDQo+IA0KPiBbMTFdIGh0dHBz
Oi8vbWFpbGFyY2hpdmUuaWV0Zi5vcmcvYXJjaC9tc2cvc3NoL09OWExBTzlDUjl3NnRVaHdFM2Fn
OUNCMTR0RS8NCj4gDQo+IFsxMl0gaHR0cHM6Ly9tYWlsYXJjaGl2ZS5pZXRmLm9yZy9hcmNoL21z
Zy9zc2gvNDdtSXgyTUlqVVlwbjQ1RUJ5c2dtQ0h5NV80Lw0KPiANCj4gX19fX19fX19fX19fX19f
X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4gU3NoIG1haWxpbmcgbGlzdCAtLSBz
c2hAaWV0Zi5vcmcNCj4gVG8gdW5zdWJzY3JpYmUgc2VuZCBhbiBlbWFpbCB0byBzc2gtbGVhdmVA
aWV0Zi5vcmcNCg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f
X18KVExTIG1haWxpbmcgbGlzdCAtLSB0bHNAaWV0Zi5vcmcKVG8gdW5zdWJzY3JpYmUgc2VuZCBh
biBlbWFpbCB0byB0bHMtbGVhdmVAaWV0Zi5vcmcK