DES has 8 different S-boxes, and AES has only 1.
What are the negative consequences of such choices?
Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. It only takes a minute to sign up.Sign up to join this community
Implementation complexity in software and constrained hardware.
In Serpent, each round uses the same S-box, even though 8 s-boxes are used. This makes it easier to bitsplice the cipher, or process each 4-bit s-box in parallel.
The minimum gate count for a DES implementation is 2300 gates. For Present it is 1075 gates.
Software and constrained hardware implementations benefit from a cipher that can be easily serialized.