Wonky AES

hackthebox

Task: AES-128-ECB network service (tiny-AES-c) injects a single random-byte fault into the state at round 9 before MixColumns and leaks both correct and faulty ciphertext. Solution: Piret-Quisquater Differential Fault Analysis recovers the round-10 key from ~600 (C, C*) pairs via per-group candidate intersection, then the AES key schedule is inverted to the master key and the flag ciphertext is ECB-decrypted.