AES3:
The Third Advanced Encryption Standard (AES)
Candidate Conference

Final Agenda

Day 1 - Thursday, April 13, 2000

8:00-9:00	- Registration, material distribution - Coffee
9:00	Introduction - Welcome and Overview [Presentation (Ed Roback and Jim Foti)]
9:20	Session 1: "FPGA Evaluations" An FPGA Implementation and Performance Evaluation of the AES Block Cipher Candidate Algorithm Finalists A.J. Elbirt, W. Yip, B. Chetwynd, C. Paar [Presentation (Adam Elbirt)] A Comparison of the AES Candidates Amenability to FPGA Implementation Nicholas Weaver, John Wawrzynek [Presentation (Nick Weaver)] Comparison of the hardware performance of the AES candidates using reconfigurable hardware Kris Gaj, Pawel Chodowiec [Presentation (Kris Gaj); on-line slides]
10:30	Coffee Break
11:00	Session 2: "Platform-Specific Evaluations" AES Finalists on PA-RISC and IA-64: Implementations & Performance John Worley, Bill Worley, Tom Christian, Christopher Worley [Presentation (John Worley)] A comparison of AES candidates on the Alpha 21264 Richard Weiss, Nathan Binkert [Presentation (Richard Weiss)] Performance Evaluation of AES Finalists on the High-End Smart Card Fumihiko Sano, Masanobu Koike, Shinichi Kawamura, Masue Shiba [Presentation (Fumihiko Sano)] How Well Are High-End DSPs Suited for the AES Algorithms? AES Algorithms on the TMS320C6x DSP Thomas J. Wollinger, Min Wang, Jorge Guajardo, Christof Paar [Presentation (Thomas Wollinger)] Fast Implementations of AES Candidates Kazumaro Aoki, Helger Lipmaa
12:30	Lunch (provided)
14:00	Session 3: "Surveys" A Performance Comparison of the Five AES Finalists Bruce Schneier, Doug Whiting [Presentation (Doug Whiting)] Efficiency Testing of ANSI C Implementations of Round 2 Candidate Algorithms for the Advanced Encryption Standard Lawrence E. Bassham III NIST Performance Analysis of the Final Round Java^TM AES Candidates Jim Dray Both of the NIST papers above were presented together. [Presentation (Larry Bassham)] Performance of the AES Candidate Algorithms in Java Andreas Sterbenz, Peter Lipp
15:00	Coffee Break
15:30- 16:45	Session 4: "Cryptographic Analysis and Properties (I)" MARS Attacks! Preliminary Cryptanalysis of Reduced-Round MARS Variants John Kelsey, Bruce Schneier [Presentation (John Kelsey)] Impossible Differential on 8-Round MARS' Core Eli Biham, Vladimir Furman Preliminary Cryptanalysis of Reduced-Round Serpent Tadayoshi Kohno, John Kelsey, Bruce Schneier
17:15	Reception - Cash bar and hors d'oeuvres
18:30- 20:00	Recent Results ("Rump") Session Presentations: A Comparative Study of Performance of AES Final Candidates Using FPGAs Andreas Dandalis, Viktor K. Prasanna, Jose D. P. Rolim [Presentation (Andreas Dandalis) - 1MB] "Empirical Correlations in AES Round Functions" (Rich Schroeppel) Cryptanalytic Progress: Lessons for AES (John Kelsey, Niels Ferguson, Bruce Schneier, Mike Stay) "IPSEC and Key Agility for AES" (Steve Bellovin) "Trawling Twofish (revisited)" (Lars Knudsen) "Semi-equivalent keys in MARS" (Niels Ferguson) A Second Twofish Retreat (The Twofish Team - Presented by Niels Ferguson) "Data-dependent Rotations and the Pseudo-randomness of (idealized) RC6" (Antoine Joux) "Hard-to-analyze ciphers" (Matt Robshaw) "Implementation of the Five AES Finalists on ARM" (Brian Gladman) "Performance of AES Candidates on the TriMedia VLIW Media-processor" (Craig Clapp)

Day 2 - Friday, April 14, 2000

8:00-8:30	- Registration, material distribution - Coffee
8:30	Session 5: "Cryptographic Analysis and Properties (II)" Attacking Seven Rounds of Rijndael under 192-bit and 256-bit Keys Stefan Lucks A collision attack on 7 rounds of Rijndael Henri Gilbert, Marine Minier Relationships among Differential, Truncated Differential, Impossible Differential Cryptanalyses against Word-Oriented Block Ciphers like RIJNDAEL, E2 Makoto Sugita, Kazukuni Kobara, Kazuhiro Uehara, Shuji Kubota, Hideki Imai [Presentation (Kazukuni Kobara)]
9:45	Coffee Break
10:15	Session 6: "AES Issues" Panel AES and Future Resiliency: More Thoughts And Questions Don Johnson [Presentation (Don Johnson)] The Effects of Multiple Algorithms in the Advanced Encryption Standard Ian Harvey [Presentation (Ian Harvey)]
11:15	Short Stretch Break (NO Coffee)
11:30	Session 7: "ASIC Evaluations / Individual Algorithm Testing" Hardware Evaluation of the AES Finalists Tetsuya Ichikawa, Tomomi Kasuya, Mitsuru Matsui [Presentation (Tetsuya Ichikawa) - view with Acrobat 4.0] Hardware Performance Simulations of Round 2 Advanced Encryption Standard Algorithms Bryan Weeks, Mark Bean, Tom Rozylowicz, Chris Ficke [Presentation (Bryan Weeks)] High-Speed MARS Hardware Akashi Satoh, Nobuyuki Ooba, Kohji Takano, Edward D'Avignon [Presentation (Kohji Takano)] Speeding up Serpent Dag Arne Osvik [Presentation (Dag Arne Osvik)]
12:45	Lunch (provided)
14:15	Session 8: "Algorithm Submitter Presentations" (with submitter Q&A) - Fifteen-minute presentations by each of the finalist algorithm submitters. Written statements by the submitters were provided at the conference. Two photos of the submitter panel, courtesy of Markus Dichtl: 1, 2 (From left to right: Ross Anderson, Ron Rivest, Vincent Rijmen, Bruce Schneier, and Shai Halevi) MARS statement [Presentation (Shai Halevi)] RC6 statement [Presentation (Ron Rivest)] Rijndael statement [Presentation (Vincent Rijmen)] Serpent statement [Presentation (Ross Anderson); color version] Twofish statement [Presentation (Bruce Schneier]
15:45	Coffee Break
16:15	Session 8, continued: "Audience Q&A and Remaining Issues for the AES Development Effort" - Continued discussion involving the audience and the finalist algorithm submitters.
17:15	Future Plans and Closing [Presentation (Ed Roback)] -At the end of the conference, all attendees had the opportunity to fill out a NIST Conference Feedback Form. Here is a summary.
17:30	Adjourn

Last Modified: May 16, 2000 (added presentation for Worley)

Technical contact: Morris Dworkin
Administrative/process questions: Elaine Barker, Bill Burr