查看文章

Joan Daemen, Vincent Rijmen

2000/4/13

AES Candidate Conference

343-348

AES3 Presentation Page 1 1 Rijndael for AES Joan Daemen Proton World Vincent Rijmen COSIC Thursday, April 20, 2000 3rd AES workshop 2 Security ● Intrinsic security: no algorithm has been broken ● Implementation attacks (eg, DPA): ● Table-lookup and XOR operations only → Rijndael lends itself to secure implementations on smart cards Page 2 2 Thursday, April 20, 2000 3rd AES workshop 3 Relative efficiency # blocks MARS RC6 Serpent Twofish Pentium Many 13 9 38 12 4 28 15 33 27 1 46 22 36 25 6805 Many 30 28 110 23 4 52 45 107 23 1 114 91 100 22 “Equivalent number of Rijndael rounds” Thursday, April 20, 2000 3rd AES workshop 4 Design Philosophy ● Simplicity ● Symmetry ● Parallelism ● Mutual independence of components ● impact of replacing a component on security analysis is limited ● Rijndael is easily extendible ● block length, key length, number of rounds Page 3 3 …