Multi-Diagonal Truncated Differentials and Ciphertext-Only Attacks on Reduced-Round AES

We present the first ciphertext-only distinguishing attack on 5-round AES and a key-recovery attack on 6-round AES for all key sizes under ASCII-encoded English-language plaintext distributions, as well as additional ciphertext-only results under uniform ASCII distributions.