AES competition/Catalogs/AES players

The metadata subpage is missing. You can start it via filling in this form or by following the instructions that come up after clicking on the [show] link to the right.

Do you see this on PREVIEW? then SAVE! before following a link. To find out more about the use of metadata for the management of Citizendium pages, see CZ:Metadata. You may see this box for one of two reasons. Either: A - New page has been created, or subpages template was added to an existing page B - Cluster move is in progress Click either the A or B link for further instructions. [Feel free to recommend improvements to the text or links in this template] A - For a New Cluster use the following directions Subpages format requires a metadata page. Using the following instructions will complete the process of creating this article's subpages. Click the blue "metadata template" link below to create the page. On the edit page that appears paste in the article's title across from "pagename =". You might also fill out the checklist part of the form. Ignore the rest. For background, see Using the Subpages template Don't worry--you'll get the hang of it right away. Remember to hit Save! the "metadata template". However, you can create articles without subpages. Just delete the {{subpages}} template from the top of this page and this prompt will disappear. :) Don't feel obligated to use subpages, it's more important that you write sentences, which you can always do without writing fancy code. [Feel free to recommend improvements to the text or links in this template] B - For a Cluster Move use the following directions The metadata template should be moved to the new name as the first step. Please revert this move and start by using the Move Cluster link at the top left of the talk page. The name prior to this move can be found at the following link. [Feel free to recommend improvements to the text or links in this template]

---

The Advanced Encryption Standard competition (AES competition) begun in 1998 involved many of the world's top cryptographers.

Some of the major developments in cryptography before AES were:

• DES from an IBM team that included Horst Feistel and Don Coppersmith
• Differential cryptanalysis, discovered by IBM's DES team, but kept secret at NSA request. Re-discovered and first published in open literature by Eli Biham and Adi Shamir.
• Linear cryptanalysis, from Mitsuru Matsui.
• The RSA algorithm for public key cryptography, from Ron Rivest, Adi Shamir and Leonard Adleman.

Both differential and linear cryptanalysis break DES with less effort than brute force, but several writers have proposed methods of making ciphers provably resistant to linear and differential cryptanalysis — Carlisle Adams in CAST, Serge Vaudenay with his decorrelation theory, and Lars Knudsen and Kaisa Nyberg with their KN ciphers.

There are also several other new attacks that are variants of differential analysis. Biham invented related key attacks, and Lars Knudsen used that technique against some ancestors of AES candidates, breaking the first versions of both SAFER and LOKI. A direct ancestor of Rijndael, the winning AES candidate, was Square, designed by Joan Daemen and Vincent Rijmen. Knudsen invented integral cryptanalysis to break that. David Wagner invented another new technique called the boomerang attack to break Vaudenay's Coconut98. All these techniques have since been used to break several other ciphers. However, the AES candidate descendants of the various ciphers broken by them were all designed to resist those attacks.

Standard references in the field include Bruce Schneier's Applied Cryptography , the later Practical Cryptography by Schneier and Niels Ferguson, and Ross Anderson's Security Engineering .

Most of the people mentioned above, and a number of others well-known in the field, participated in the AES process.

Summary table

Here is a table showing some of the major players. For several papers, some of the co-authors are omitted to make the table more readable; see references in the main article for complete co-author lists.

AES cipher	Team included	Country	Attack on ancestor	Analysis of candidate	Outcome
Rijndael	Rijmen, Daemen	Belgium	Knudsen	Ferguson, Schroeppel, Whiting	Winner
Twofish	Schneier, Kelsey, Whiting, Wagner, Ferguson	US, Holland			Finalist
Serpent	Anderson, Biham, Knudsen	UK, Israel, Norway			Finalist
RC6	Rivest	US			Finalist
MARS	Coppersmith	US			Finalist
Hasty Pudding	Schroeppel	US
FROG		South Africa		Schneier, Wagner, Ferguson	broken
MAGENTA		Germany		Schneier, Biham, Shamir, Ferguson, Knudsen	broken
E2		Japan		Matsui
DEAL	Knudsen	Norway		Schneier, Kelsey
DFC	Vaudenay	France	Wagner	Knudsen, Rijmen
CAST-256	Adams	Canada
LOKI97	Seberry	Australia	Knudsen
SAFER+	Massey	Switzerland	Knudsen
CRYPTON		S Korea

The columns are:

• Team included: Major players involved; many of the teams had other people as well.
• Country: The nationality of the author(s) for most ciphers. Location of the company for RC6, MARS, FROG, and MAGENTA.
• Attack on ancestor: Attacks on previous ciphers, fixed before the candidate ciphers were designed.
• Analysis of candidate: Published work on attacking the actual candidate ciphers,
• Outcome: Cipher status when AES competition ended.