Papers Submitted to AES3

GENERAL AES Home Page Rijndael Information Modes of Operation Discussion Forum Recent News ROUND 2 (8/1999-5/2000) Finalist Algorithms Round 2 Analysis Round 2 Comments 3rd AES Conference ROUND 1 (8/1998-4/1999) R1 Algorithms R1 Announcement R1 Comments 2nd AES Conference 1st AES Conference Pre-ROUND 1 (1/1997-7/1998) Call for Candidates AES Beginnings

For AES3, statements were provided by each of the finalist submitters, stating why they think their algorithm should be selected for the AES standard. Each of the submitters were then given 15 minutes to present their cases at AES3. Here are the submitter statements: MARS statement RC6 statement Rijndael statement Serpent statement Twofish statement A total of thirty-seven (37) papers were received in response to NIST's AES3 Call for Papers. The AES3 Program Committee evaluated those papers and accepted twenty-four (24) for the main program of AES3. (One of the remaining thirteen papers was then withdrawn by the authors.) The final agenda for AES3, which includes links to the accepted papers, is now available. Analysis papers submitted for AES3 are considered to be official public comments for Round 2 of the AES development effort, regardless of their acceptance for AES3. All thirty-six (36) papers are available below. Zip files containing the 36 AES3 papers: AES3papers-1.zip [714 KB] AES3papers-2.zip [723 KB] AES3papers-3.zip [972 KB] AES3papers-4.zip [934 KB] AES3papers-5.zip [801 KB] AES3 Paper Submissions Title Author(s) Size (KB) Future Resiliency: A Possible New AES Evaluation Criterion Don Johnson 31 AES and Future Resiliency: More Thoughts And Questions Don Johnson 24 Performance of the AES Candidate Algorithms in Java Andreas Sterbenz, Peter Lipp 57 Attacking Seven Rounds of Rijndael under 192-bit and 256-bit Keys Stefan Lucks 218 AES Finalists on PA-RISC and IA-64: Implementations & Performance John Worley, Bill Worley, Tom Christian, Christopher Worley 162 The Effects of Multiple Algorithms in the Advanced Encryption Standard Ian Harvey 45 Impossible Differential on 8-Round MARS' Core Eli Biham, Vladimir Furman 171 An FPGA Implementation and Performance Evaluation of the AES Block Cipher Candidate Algorithm Finalists A. J. Elbirt, W Yip, B Chetwynd, C Paar 291 The Power of NIST's Statistical Testing of AES Candidates Sean Murphy 218 The Key Separation of Twofish Sean Murphy 114 A collision attack on 7 rounds of Rijndael Henri Gilbert, Marine Minier 200 How Well Are High-End DSPs Suited for the AES Algorithms?: AES Algorithms on the TMS320C6x DSP Thomas J. Wollinger, Min Wang, Jorge Guajardo, Christof Paar 179 A Comparison of the AES Candidates Amenability to FPGA Implementation Nicholas Weaver, John Wawrzynek 185 Performance Evaluation of AES Finalists on the High-End Smart Card Fumihiko Sano, Masanobu Koike, Shinichi Kawamura, Masue Shiba 112 Hardware Evaluation of the AES Finalists Tetsuya Ichikawa, Tomomi Kasuya, Mitsuru Matsui 198 MARS Attacks! Preliminary Cryptanalysis of Reduced-Round MARS Variants John Kelsey, Bruce Schneier 197 A Performance Comparison of the Five AES Finalists Bruce Schneier, Doug Whiting 193 A comparison of AES candidates on the Alpha 21264 Richard Weiss, Nathan Binkert 18 The AES Winner Dhiren Patel 18 Fast Implementations of AES Candidates Kazumaro Aoki, Helger Lipmaa 88 High-Speed MARS Hardware Akashi Satoh, Nobuyuki Ooba, Kohji Takano, Edward D'Avignon 117 Comparison of the hardware performance of the AES candidates using reconfigurable hardware Kris Gaj, Pawel Chodowiec 572 A Comparative Study of Performance of AES Final Candidates Using FPGAs Andreas Dandalis, Viktor K. Prasanna, Jose D. P. Rolim 161 Realization of the Round 2 AES Candidates using Altera FPGA Viktor Fischer 86 Performance Comparison of 5 AES Candidates with New Performance Evaluation Tool Masahiko Takenaka, Naoya Torii, Kouichi Itoh, Jun Yajima 159 Speeding up Serpent Dag Arne Osvik 161 AES Implementation Experience on the ARM Architecture (Abstract) Brian Gladman 5 NIST Performance Analysis of the Final Round Java™ AES Candidates (updated April 27, 2000) Jim Dray (NIST) 29 Efficiency Testing of ANSI C Implementations of Round 2 Candidate Algorithms for the Advanced Encryption Standard (updated April 27, 2000) Lawrence E. Bassham III (NIST) 85 Randomness Testing of the Advanced Encryption Standard Finalist Candidates (updated March 28, 2000) Juan Soto, Lawrence E. Bassham III (NIST) 534 Preliminary Cryptanalysis of Reduced-Round Serpent Tadayoshi Kohno, John Kelsey, Bruce Schneier 225 Relationships among Differential, Truncated Differential, Impossible Differential Cryptanalyses against Word-Oriented Block Ciphers like RIJNDAEL, E2 Makoto Sugita, Kazukuni Kobara, Kazuhiro Uehara, Shuji Kubota, Hideki Imai 280 Comparison of Randomness Provided by Several Schemes for Block Ciphers Shiho Moriai, Serge Vaudenay 141 Cryptanalysis of Reduced Variants of Rijndael Eli Biham, Nathan Keller 179 Correlation Attack to the Block Cipher RC5 and the Simplified Variants of RC6 Takeshi Shimoyama, Kiyofumi Takeuchi, Juri Hayakawa 197 Hardware Performance Simulations of Round 2 Advanced Encryption Standard Algorithms Bryan Weeks, Mark Bean, Tom Rozylowicz, Chris Ficke (NSA) 104

Technical contact: Morris Dworkin
Administrative/process questions: Elaine Barker, Bill Burr