ciphers with keys modifying control flow?

[Florian Weimer]

* Steven Bellovin:

> Does anyone know of any ciphers where bits of keys modify the
> control path, rather than just data operations?

AES.  See François Koeune, Jean-Jacques Quisqater, "A timing attack
aganst Rijndael". Université catholique de Louvain, Technicl Report
CG-1999.

---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo at metzdowd.com