Can anyone explain (or give a link to document about) why Rijndaal won the AES, especially comparing it to other finalists (Serpent and Twofish)? What criteria were used to make decision?
Or is there detailed comparison of these algorithms including cryptographic strength, performance tests on different CPUs and maybe FPGA implementations (AFAIK i.e. Serpent's round can be fully parallelized in dataflow architectures) and also point if there are some general issues with these algorithms (i.e. attacks on AES-256 that makes it less strong than AE-S128)?