Multidimensional meet-in-the-middle attack on AES
Why GOST was broken with such method and AES not?

MD-MITM attacks have been published e.g. against KATAN and GOST in https://eprint.iacr.org/2011/619. The authors stated that their attack is &quot;suitable for lightweight ciphers with simple key schedules and block sizes smaller than key lengths&quot;. Another reason and the answer for this question is, that the attacked ciphers in that paper had a block lengths up to 64 bit, while AES has a block length of 128 bit and the space–time tradeoff would require too much space.