Professional Documents
Culture Documents
This Lecture
• Why AES?
• NIST Criteria for potential candidates
• The AES Cipher
• AES Functions and Inverse Functions
• AES Key Expansion
• Implementation Aspects
• AES Security and Strength
Why AES?
• Symmetric block cipher, published in 2001
• Intended to replace DES and 3DES
DES is vulnerable to differential attacks
3DES has slow performances
NIST Criteria to Evaluate
Potential Candidates
• Security: The effort to crypt analyze an
algorithm.
• Cost: The algorithm should be practical in a
wide range of applications.
• Algorithm and Implementation
Characteristics : Flexibility, simplicity etc.
5 final candidates have been chosen out of 15
NIST Criteria – cont.
• General Security
• Software Implementations
• Hardware Implementations
• Restricted-Space Environments
• Attacks on Implementations
• Encryption vs. Decryption
• Key Agility
• Potential for Instruction-Level Parallelism
• Other versatility and Flexibility
NIST selected Rijndael as the proposed AES algorithm
The AES Cipher
• Block length is limited to 128 bit
• The key size can be independently specified
to 128, 192 or 256 bits
Key size (words/bytes/bits) 4/16/128 6/24/192 8/32/256
Number of rounds 10 12 14
k0 k4 k8 k12
k1 k5 k9 k13 w0 w1 w2 …… w42 w43
k2 k6 k10 k14
k3 k7 k11 k15
The AES Cipher
• Single 128 bit block as input
• Copied to a State array with Nb columns (Nb=4)
Shift rows
Round 9
SubBytes(state)
ShiftRows(state)
AddRoundKey(state, w[Nr*Nb, (Nr+1)*Nb-1)
Out = state
end
The AES Cipher
• Only Add round key makes use of the key
• Other three functions are used for diffusion
and confusion
• Final round consists of only three stages
The AES Inverse Cipher
ciphertext
InvShiftRows(state)
InvSubBytes(state)
AddRoundKey(state, w[0, Nb-1])
Out = state
end
The AES Inverse Cipher
• Decryption algorithm uses the expanded
key in reverse order
• All functions are easily reversible and their
inverse form is used in decryption
• Decryption algorithm is not identical to the
encryption algorithm
• Again, final round consists of only three
stages