AES Key Schedule
ConceptThe AES Key Schedule is the key-expansion procedure that derives round keys from the AES master key and is widely modeled and targeted in fault-based and side-channel analyses of AES-128 implementations.
First seen 7/6/2026
Last seen 7/6/2026
Evidence 3 chunks
Wiki v1
WIKI
AES Key Schedule
Overview
The AES key schedule is the component of the Advanced Encryption Standard (AES) that expands a master key into a sequence of round keys used by the cipher's data-processing rounds. In AES-128, the schedule generates 11 round keys (including the initial key) from the 128-bit master key, and the same expansion structure is reused (with different round counts) for AES-192 and AES-256.
NEIGHBORHOOD
No graph connections found for this entity yet. It may appear in future ingestion runs.
explore full graph →RELATIONSHIPS
3 connectionsμARCHIFI is evaluated on the AES key schedule use case.
Differential fault analysis targets the AES key schedule to retrieve key information.
Tiny AES implements the AES key schedule.
CITATIONS
4 sources4 citations — click to collapse
[1] The AES key schedule is targeted by Differential Fault Analysis (Takahashi et al. 2007; Ali and Mukhopadhyay 2011). µArchiFI: Formal Modeling and Verification Strategies for Microarchitectural Fault Injections
[2] Use Case III in µARCHIFI analyzes a 128-bit AES KeySchedule program compiled with -Os on the Ibex core, with attacker goal φIII := (9th Round key byte = 0) under combinational reset faults in the EX stage and a budget of N = 2, resulting in φ unreachable. µArchiFI: Formal Modeling and Verification Strategies for Microarchitectural Fault Injections
[3] The Tiny AES implementation by kokke provides the AES key schedule analyzed in the µARCHIFI case study. µArchiFI: Formal Modeling and Verification Strategies for Microarchitectural Fault Injections
[4] Recent work models the AES key schedule as a computational graph and uses a neural message-passing network to recover AES master keys from corrupted cold-boot memory, outperforming prior cold-boot attack methods. Recovering AES Keys with a Deep Cold Boot Attack