Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Can anyone explain (or give a link to document about) why Rijndaal won the AES, especially comparing it to other finalists (Serpent and Twofish)? What criteria were used to make decision?

Or is there detailed comparison of these algorithms including cryptographic strength, performance tests on different CPUs and maybe FPGA implementations (AFAIK i.e. Serpent's round can be fully parallelized in dataflow architectures) and also point if there are some general issues with these algorithms (i.e. attacks on AES256 that makes it less strong than AES128)?

share|improve this question

migrated from Feb 20 '12 at 7:40

This question came from our site for professional and enthusiast programmers.

up vote 4 down vote accepted

During the end of the contest the twofish team published a paper with their analysis where they discuss their thoughts and beliefs of what should happen. Futhermore they discuss the speed security tradeoff. Keep in mind this is a bit ago during the actual AES competition.

share|improve this answer
Considering the keyed SBoxes of Twofish, it would be nice to see some more recent analysis of how well (or badly) Twofish resists timing attacks, when used for online communications. – Henrick Hellström Feb 21 '12 at 7:50
he article by Twofish creators state "Twofish has the most thoroughly explicated design of any AES candidate." Not saying it's right or wrong, but We would prefer a more neutral source, e.g. pdf @ – Pacerier Apr 15 at 10:22

The final report is here All five finalists had at least adequate security on all accounts studied during the process, but Rijndael had better performance characteristics in both software and firmware on other hardware than 32 bit processors, compared to the other finalists.

share|improve this answer
Is the site down? – Pacerier Apr 15 at 9:22
The link in the answer belongs to an archived part of the nist web site that is supposed to remain the same for the overseeable future. It is up now, and it is a static page so it rarely goes down. If you have trouble connecting the problem is more likely closer to your end. – Henrick Hellström Apr 15 at 11:03

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.