Public Comments on AES Candidate Algorithms - Round 2

GENERAL AES Home Page Recent News ROUND 2 (8/1999-5/2000) AES Finalists: NIST's Round 1 Report Finalist Algorithm Information Round 2 Analysis Round 2 Comments Discussion Forum 3rd AES Conference ROUND 1 (8/1998-4/1999) Round 1 Algorithms Round 1 Announcement Round 1 Comments 2nd AES Conference 1st AES Conference Pre-ROUND 1 (1/1997-7/1998) Call for Candidates AES Beginnings		Overview On August 9, 1999, NIST announced the five AES finalist candidates for Round 2 evaluation, and called for public comments on those candidates. NIST also called for comments in the Federal Register of Sept. 15, 1999. Other, non-official discussions, have also been taking place at NIST's AES Forum. Discussions at that site should be AES-specific. The Round 2 comment period closed on May 15, 2000. The NIST AES Team would like to thank all of the individuals, collaborations, and organizations that submitted comments. Comments Received The comments are divided into several categories: General comments [TXT] - public comments that were contained in the body of an e-mail message.THIS FILE CONTAINS OVER 150 PAGES OF COMMENTS!!! Papers submitted to the AES3 Conference are considered official public comments. General Papers and Letters - Electronically submitted papers and letters have been converted to PDF format. Generally-speaking, the most recent documents are located at the TOP of the list, but related papers submitted by the same author on different dates (e.g., Hitachi letters) may be posted together. NOTE: If you do not see your submitted comment listed here, please look carefully in the file of general comments listed above - it should be there. TITLE AUTHOR(s) Letter from the Federal Reserve Bruce J. Summers 68 Comments by the NESSIE Project on the AES Finalists Bart Preneel et al. Differential Distributions for Twofish S-Boxes Sean Murphy A Strategy for Analyzing Public Comments and Preparing the Round 2 Status Report [Microsoft Excel Spreadsheet] AES Issues Miles Smid Letter from Vodafone AirTouch Michael Walker Letter from U.S. Department of Justice - Immigration and Naturalization Service - Radio Systems Section David G. Butler Letter from Motorola Doug Hanson The Twofish Team's Final Comments on AES Selection Bruce Schneier, John Kelsey, Doug Whiting, David Wagner, Chris Hall, Niels Ferguson, Tadayoshi Kohno, Mike Stay AES Key Agility Issues in High-Speed IPsec Implementations Doug Whiting, Bruce Schneier, Steve Bellovin The Case for RC6 as the AES Ronald L. Rivest, M.J.B. Robshaw, Y.L. Yin Differential Cryptanalysis, Key-dependent S-boxes, and Twofish Sean Murphy, M.J.B. Robshaw Letter from the Federal Law Enforcement Wireless Users Group (FLEWUG), INFOSEC Task Group Jim Downes Properties of the Building Blocks of Serpent Serge Mister Key Agility in MARS Shai Halevi MARS and the AES Selection Criteria Comments on MARS's linear analysis IBM MARS Team Comments on the Advanced Encryption Standard David A. McGrew Trawling Twofish (revisited) Lars R. Knudsen Recommendation to NIST for the AES Lars R. Knudsen, Håvard Raddum AES Second Round Comments Brian Gladman Properties of Expanded Keys of the AES Candidates M. Bondarenko, I. Gorbenko, T. Grinenko, S. Golovashich, O. Oleshko, A. Bondarenko Implementation of the Serpent Algorithm Using Altera FPGA Devices Piotr Bora, Tomasz Czajka The AES second round Comments of the Rijndael [Team] Joan Daemen, Vincent Rijmen The Round Functions of SERPENT Generate the Alternating Group Ralph Wernsdorf CRIPTOR1.0. VLSI Implementation of the RC6 Block Cipher Analysis of Suitability for Pseudorandom BIST of the RC6 Cipher Erica Mang Results of New Boolean Functions Search for Serpent S-boxes Jun Yajima, Masahiko Takenaka, Naoya Torii, Kouichi Itoh Implementation of the block cipher Rijndael using Altera FPGA (Note that there may be problems when printing this document, so here is a lower resolution file which appears to print better.) Piotr Mroczkowski Potential Flaws in the Conjectured Resistance of MARS to Linear Cryptanalysis M.J.B. Robshaw, Yiqun Lisa Yin Twofish Technical Report #5 Impossible differentials in Twofish Niels Ferguson Twofish Technical Report #6 A Twofish Retreat: Related-Key Attacks Against Reduced-Round Twofish Niels Ferguson, John Kelsey, Bruce Schneier, Doug Whiting Twofish Technical Report #7 Key Separation in Twofish John Kelsey Cryptanalytic Progress: Lessons for AES John Kelsey, Niels Ferguson, Bruce Schneier, Mike Stay Letter from Jon Graff - "Considerations in selecting the final AES algorithm" Jon Graff Letter from Carl H. Meyer - "AES Vote for MARS" Letter from Carl H. Meyer - "AES: Justifying Vote for MARS" Carl H. Meyer Input and Output Block Conventions for AES Encryption Algorithms Brian Gladman Letter (4/7/2000) from Hitachi regarding Intellectual Property issues - Hitachi claims to have U.S. patents related to AES candidates Letter (4/10/2000) from Hitachi that elaborates on 4/7 letter - supplemented with abstracts for US4982429 and US5103479 Shinichiro Harano (Hitachi, Ltd.) On the Statistical Testing of RC6 Jakob Jonsson, Jan-Ove Larsson, Matthew J.B. Robshaw Linear approximations to the MARS S-box Lars R. Knudsen, Håvard Raddum Some Informal Reflections on Rijndael and Twofish Brian Gladman Correlations in RC6 Lars R. Knudsen, Willi Meier

Download the Adobe Acrobat Reader

Questions?
NIST Press Contacts

Computer Security Division
National Institute of Standards and Technology