Multidimensional meet-in-the-middle attack on AES Is an MD-MITM attack possible for AES? As I know, we can break 2 rounds of AES. So we could apply the MD-MITM attack 5 times. This should significantly reduce the security of AES.
What stops us from these kinds of attacks? Why GOST was broken with such method and AES not?
Why GOST was broken with such method and AES not?

MD-MITM attacks have been published e.g. against KATAN and GOST in https://eprint.iacr.org/2011/619. The authors stated that their attack is &quot;suitable for lightweight ciphers with simple key schedules and block sizes smaller than key lengths&quot;. Another reason and the answer for this question is, that the attacked ciphers in that paper had a block lengths up to 64 bit, while AES has a block length of 128 bit and the space–time tradeoff would require too much space.