cd /news/artificial-intelligence/gram-moments-and-pairwise-mixing-of-… · home › topics › artificial-intelligence › article
[ARTICLE · art-152864] src=eprint.iacr.org ↗ pub= topic=artificial-intelligence verified=true sentiment=· neutral

Gram Moments and Pairwise Mixing of AES

A new proof establishes that 4k+4 rounds of AES with independent uniform round keys, sampled once and retained across evaluations, have pairwise total variation distance below 2^{-14.3-73.1k} for every integer k≥0, tightening earlier almost-pairwise-independence analyses of the cipher. The work bounds local difference channels on additive maximum distance separable codes by retaining squared overlaps between channel responses as the second moment of a Gram matrix, separating activity-pattern error from residual variation across one to four words. As a result, 12, 16, and 20 AES rounds suffice for statistical accuracy of 2^{-128}, 2^{-192}, and 2^{-256} respectively, controlling any classical algorithm with a finite private seed making at most two adaptive forward queries.

by read1 min views44 publishedOct 1, 2026

Almost pairwise independence measures how closely a block cipher reproduces the joint output distribution of a uniform random permutation on two distinct plaintexts. Recent analyses of AES with independent round keys combine smoothing from a fixed input difference with contraction over later rounds. The central difficulty is to control the dependencies created by diffusion. We develop a bound for local difference channels on additive maximum distance separable codes that retains the squared overlaps between channel responses, expressed as the second moment of a Gram matrix. This refines the activity-space analysis and strengthens both the initial estimate and the repeated contraction. We prove that, for every integer $k\ge0$, $4k+4$ rounds of AES with independent uniform round keys, sampled once and retained across evaluations, have pairwise total variation distance below $2^{-14.3-73.1k}$. The proof separates activity-pattern error from residual variation involving one, two, three, or four words. A fixed five-component comparison propagates these errors through each additional four-round block. Consequently, 12, 16, and 20 rounds suffice for statistical accuracy $2^{-128}$, $2^{-192}$, and $2^{-256}$, respectively. These bounds control the complete view of any classical algorithm with a finite private seed making at most two adaptive forward queries.

── more in #artificial-intelligence 4 stories · sorted by recency
── more on @aes 3 stories trending now
sponsored brought to you by zahid.host 4,200+ EU-deployed projects
reading about agents? ship yours in a single git push.

Run your AI side-project on zahid.host

EU-based hosting, git-push deploys, automatic HTTPS, no cold starts. Free tier with a custom domain — perfect for shipping the agent you just read about.

$git push zahid main
→ Live at https://your-agent.zahid.host ✓
Get free account → Pricing
from €0/mo · no card required
LIVE [news/gram-moments-and-pai…] indexed:0 read:1min 2026-10-01 · —