DES has 8 different S-boxes, and AES has only 1.
What are the negative consequences of such choices?
DES has 8 different S-boxes, and AES has only 1.
What are the negative consequences of such choices?
Implementation complexity in software and constrained hardware.
In Serpent, each round uses the same S-box, even though 8 s-boxes are used. This makes it easier to bitsplice the cipher, or process each 4-bit s-box in parallel.
The minimum gate count for a DES implementation is 2300 gates. For Present it is 1075 gates.
Software and constrained hardware implementations benefit from a cipher that can be easily serialized.