10
votes
Accepted
Is it true that Serpent and twofish are much stronger than AES?
SHORT: This is kind of true. However, things are bit different now. Better protection against brute force is inaccurate claim.
At the time Rijndael (AES) won the competition, it was faster, and ...
- 5,369
9
votes
Accepted
Is there a real purpose to use Twofish, Serpent or Threefish instead of AES?
Serpent is straightforward to implement with side-channel resistance due to the bit-sliced design. Because AES incorporates an S-Box that is most simply implemented as a lookup table, implementations ...
- 19.9k
9
votes
Why should symmetric block cyphers be efficient?
Slowing block ciphers by increasing the number of rounds is an idea that does not catch because
Compared to 15 years ago, the volume of data routinely enciphered by a computer has grown much more ...
- 145k
8
votes
Accepted
How do the Serpent S-boxes work?
Serpent uses 8 different 4-bit S-boxes (i.e. each S-box contains 16 elements) a total of 32 times. There are no "rows" or "columns" as it is a one-dimensional array containing a ...
- 15.5k
6
votes
Accepted
Serpent vs AES,, theoretical security
The number of rounds does not directly influence security; it depends at least as much on the complexity of those rounds. That said, it is possible to use the percentage of rounds for which there are ...
- 94.5k
5
votes
AES vs Serpent - which is more side-channel resistent?
As a rule, ciphers are not vulnerable to side channel attacks but implementations are, as was pointed out in the comments; however, as a someone who does semiconductors first, and then implements ...
- 4,948
5
votes
Is it true that Serpent and twofish are much stronger than AES?
Here are quotes from Cryptography Engineering: Design Principles and Practical Applications (Niels Ferguson, Bruce Schneier, Tadayoshi Kohno) :
Serpent [...] is built like a tank. Easily the most ...
- 151
4
votes
Is it true that Serpent and twofish are much stronger than AES?
No, there is no mathematical proof to conclusively prove that Serpent and Twofish are stronger. The newer processors (intel, AMD, and even processors used in phones) have hardware instructions for AES,...
- 293
4
votes
Why did Rijndael become the AES Standard . What is wrong with Twofish and Serpent?
Welcome to the site! I'll try and give the general answer you're looking for:
When NIST ran the AES competition in 1997 - 2000 to select the best symmetric cipher, they were looking for an algorithm ...
- 3,687
3
votes
OpenSSL supports AES, Camellia, ChaCha. How about Twofish, Threefish, Serpent?
AES is the main block cipher in use today, standardized by NIST. Camellia is a Japanese standardized cipher. ChaCha is a fast stream cipher specified by Bernstein and incorporated into TLS with ...
- 94.5k
3
votes
Is there a real purpose to use Twofish, Serpent or Threefish instead of AES?
In most cases, you should probably use AES, especially if there is hardware support.
In some cases, it might make sense to use one of the others. For example, the simplicity of Threefish would make ...
3
votes
Is it possible to identify a Serpent encryption key in memory?
Yes, Serpent also does a deterministic well-known key expansion. So it should be possible to identify the sub keys in memory. You will want to know what implementation you are looking for since there ...
- 12k
2
votes
Why should symmetric block cyphers be efficient?
This question can be generalized to the question why ciphers should be quick. There are several reason why encryption/decryption needs to be quick even today:
Faster to implement aka (easier to ...
- 51
2
votes
Serpent intermediate rounds differs from example code, but result is still correct, is it a problem?
To check if it is a bitslice issue, we can look at a round output, this is round 1 from the example:
...
- 13.2k
2
votes
Is it possible to identify a Serpent encryption key in memory?
Yes, it would be possible to identify Serpent or Twofish keys from round keys in memory, which are likely to exist in a software-only implementation optimized for speed (but not in hypothetical ...
- 145k
2
votes
Accepted
Security of ChaCha compared to AES and Serpent
This answer has 2 parts, the 1st on "quantifying" the security of unbroken ciphers, the 2nd on the choice of ciphers for different usage scenarios.
If (on a scale of 1 to 10) AES is 5 and ...
- 9,795
1
vote
Accepted
Encrypting two messages with the same content with different keys/IVs still secure if attacker knows they are the same?
Yes, that should be secure as long as each algorithm is CPA-secure (as AES, Chacha20 and Serpent should be), and the keys are chosen independently and uniformly at random (different keys is not enough)...
- 145k
1
vote
Are the Serpent Test Vectors incorrect?
Thanks to Richie Frame pointing out this is basically a duplicate of question
Bouncy jdk 1.51 Serpent KAT tests vs Nessie vectors
I discovered the NESSIE writes their key, plaintext, and ciphertext ...
- 121
1
vote
Key strenth in Cipher cascades (Veracrypt)
What you would do in such a case is take a master key (which could be derived from a password) of a certain length (in your cases probably 128 or 256 bit long) and use a key derivation function (like ...
- 2,548
Only top scored, non community-wiki answers of a minimum length are eligible