Public Comments on AES Candidate Algorithms - Round 2

GENERAL AES Home Page Rijndael Information Modes of Operation Discussion Forum Recent News ROUND 2 (8/1999-5/2000) Finalist Algorithms Round 2 Analysis Round 2 Comments 3rd AES Conference ROUND 1 (8/1998-4/1999) R1 Algorithms R1 Announcement R1 Comments 2nd AES Conference 1st AES Conference Pre-ROUND 1 (1/1997-7/1998) Call for Candidates AES Beginnings		Overview On August 9, 1999, NIST announced the five AES finalist candidates for Round 2 evaluation, and called for public comments on those candidates. NIST also called for comments in the Federal Register of Sept. 15, 1999. Other, non-official discussions, also took place at NIST's AES Forum. Discussions at that site should be AES-specific. The Round 2 comment period closed on May 15, 2000. The NIST AES Team would like to thank the many people and organizations that submitted comments. Comments Received The "General Comments" and "General Papers and Letters" that are accessible below are now also available in three ZIP files (with instructions in a README file): README AESround2comments-1.zip [1,372 KB] (updated June 5 with Federal Reserve comment) AESround2comments-2.zip [1,316 KB] AESround2comments-3.zip [1,614 KB] The comments are divided into several categories: General comments [TXT] - public comments that were contained in the body of an e-mail message. PLEASE DOWNLOAD THIS FILE - IT CONTAINS OVER 150 PAGES OF COMMENTS!!! (May 23, 2000 - Table of Contents modified to reflect commenters and associated pages.) Papers submitted to the AES3 Conference are considered official public comments. General Papers and Letters - Electronically submitted papers and letters have been converted to PDF format. Generally-speaking, the most recent documents are located at the TOP of the list, but related papers submitted by the same author on different dates (e.g., Hitachi letters) may be posted together. NOTE: If you do not see your submitted comment listed here, please look carefully in the file of general comments listed above - it should be there. TITLE AUTHOR(s) Size (KB) Letter from the Federal Reserve Bruce J. Summers 68 Comments by the NESSIE Project on the AES Finalists Bart Preneel et al. 250 Differential Distributions for Twofish S-Boxes Sean Murphy 185 A Strategy for Analyzing Public Comments and Preparing the Round 2 Status Report [Microsoft Excel Spreadsheet] AES Issues Miles Smid 55 [38] 32 Letter from Vodafone AirTouch Michael Walker 5 Letter from U.S. Department of Justice - Immigration and Naturalization Service - Radio Systems Section David G. Butler 292 Letter from Motorola Doug Hanson 10 The Twofish Team's Final Comments on AES Selection Bruce Schneier, John Kelsey, Doug Whiting, David Wagner, Chris Hall, Niels Ferguson, Tadayoshi Kohno, Mike Stay 156 AES Key Agility Issues in High-Speed IPsec Implementations Doug Whiting, Bruce Schneier, Steve Bellovin 119 The Case for RC6 as the AES Ronald L. Rivest, M.J.B. Robshaw, Y.L. Yin 270 Differential Cryptanalysis, Key-dependent S-boxes, and Twofish Sean Murphy, M.J.B. Robshaw 151 Letter from the Federal Law Enforcement Wireless Users Group (FLEWUG), INFOSEC Task Group Jim Downes 6 Properties of the Building Blocks of Serpent Serge Mister 131 Key Agility in MARS Shai Halevi 121 MARS and the AES Selection Criteria Comments on MARS's linear analysis IBM MARS Team 37 165 Comments on the Advanced Encryption Standard David A. McGrew 67 Trawling Twofish (revisited) Lars R. Knudsen 193 Recommendation to NIST for the AES Lars R. Knudsen, Håvard Raddum 88 AES Second Round Comments Brian Gladman 6 Properties of Expanded Keys of the AES Candidates M. Bondarenko, I. Gorbenko, T. Grinenko, S. Golovashich, O. Oleshko, A. Bondarenko 610 Implementation of the Serpent Algorithm Using Altera FPGA Devices Piotr Bora, Tomasz Czajka 58 The AES second round Comments of the Rijndael [Team] Joan Daemen, Vincent Rijmen 113 The Round Functions of SERPENT Generate the Alternating Group Ralph Wernsdorf 47 CRIPTOR1.0. VLSI Implementation of the RC6 Block Cipher Analysis of Suitability for Pseudorandom BIST of the RC6 Cipher Erica Mang 140 60 Results of New Boolean Functions Search for Serpent S-boxes Jun Yajima, Masahiko Takenaka, Naoya Torii, Kouichi Itoh 16 Implementation of the block cipher Rijndael using Altera FPGA (Note that there may be problems when printing this document, so here is a lower resolution file which appears to print better.) Piotr Mroczkowski 142 (77) Potential Flaws in the Conjectured Resistance of MARS to Linear Cryptanalysis M.J.B. Robshaw, Yiqun Lisa Yin 230 Twofish Technical Report #5 Impossible differentials in Twofish Niels Ferguson 131 Twofish Technical Report #6 A Twofish Retreat: Related-Key Attacks Against Reduced-Round Twofish Niels Ferguson, John Kelsey, Bruce Schneier, Doug Whiting 213 Twofish Technical Report #7 Key Separation in Twofish John Kelsey 101 Cryptanalytic Progress: Lessons for AES John Kelsey, Niels Ferguson, Bruce Schneier, Mike Stay 127 Letter from Jon Graff - "Considerations in selecting the final AES algorithm" Jon Graff 7 Letter from Carl H. Meyer - "AES Vote for MARS" Letter from Carl H. Meyer - "AES: Justifying Vote for MARS" Carl H. Meyer 85 113 Input and Output Block Conventions for AES Encryption Algorithms Brian Gladman 78 Letter (4/7/2000) from Hitachi regarding Intellectual Property issues - Hitachi claims to have U.S. patents related to AES candidates Letter (4/10/2000) from Hitachi that elaborates on 4/7 letter - supplemented with abstracts for US4982429 and US5103479 Shinichiro Harano (Hitachi, Ltd.) 6 12 (48,48) On the Statistical Testing of RC6 Jakob Jonsson, Jan-Ove Larsson, Matthew J.B. Robshaw 151 Linear approximations to the MARS S-box Lars R. Knudsen, Håvard Raddum 107 Some Informal Reflections on Rijndael and Twofish Brian Gladman 32 Correlations in RC6 Lars R. Knudsen, Willi Meier 219

Download the Adobe Acrobat Reader

Technical contact: Morris Dworkin
Administrative/process questions: Elaine Barker, Bill Burr