This question already has an answer here:

is it common , we increase key size to 512 Bit in AES Algorithm?

marked as duplicate by Ella Rose, kelalaka, e-sushi Dec 3 at 8:52

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

  • AES has max 256-key bits. – kelalaka Nov 30 at 17:09

No. It's not even possible, never mind uncommon. If you did, it would have to be a whole new internal construction and no longer able to be called AES. Have a look at the key schedule, especially the diagram on the right hand side. 512 bits won't fit.

  • Hi , Thanks For your response.I'm studying about symmetric Encryption algorithm and I am student in Master degree.and I want to optimization one Symmetric Encryption algorithm DES or AES , please help me and sen your Idea. Best Regards. – maryam Nov 30 at 18:55
  • @maryam You may have to rethink your proposal after this and the 256 bit DES question. As demonstrated, it's not possible to increase a key size beyond the specification of the common primitives. You would have to re-architect the whole thing and there are few on Earth qualified to do that securely. It would not even be optimisation, but rather ground up design. Tricky. – Paul Uszak Dec 1 at 0:55
  • 1
    For a 512 bit cipher, consider working sha512 into a feistel structure. 512 bit key and 1024 bit block size. But why do this? Such a cipher would be no more secure in a practical sense, and possibly much less secure, than 128 bit AES. – WDS Dec 1 at 19:05
  • 1
    You wouldn't need to change the internal construction, just run the key schedule for longer and use more rounds (for more round keys). But you're right that it would no longer be defined as AES. – forest Dec 2 at 3:29
  • 1
    @PaulUszak Why wouldn't the NSA allow it? The truth is that there's simply no reason to increase the keysize. 256 bits is more than enough. It is absolutely trivial to build a cipher with an arbitrary key size from a cipher like AES. The reason people don't fork it often is because the people who understand enough about crypto to do so know that it's pointless. – forest Dec 2 at 12:06

Not the answer you're looking for? Browse other questions tagged or ask your own question.