I have done research on AES cryptanalysis, and let me tell you, it's possibly open to some sort distinguishability attack (telling it apart from the ideal cipher, which doesn't matter much in practice), but we didn't make any progress on actually reversing it or recovering data.