AES 5 and 6 round SQUARE Attack
Found an answer here:

For each group of 256 plaintexts, this filter rejects 255/256 of all
wrong key guesses. As we guess a total of nine key bytes, we will need
10 or so groups of 256 encryptions to find the key.