David Johnston wrote: > Jon Callas wrote: >> >> >> Moreover, AES-256 is 20-ish percent slower than AES-128. > Compared to AES-128, AES-256 is 140% of the rounds to encrypt 200% as > much data. So when implemented in hardware, AES-256 is substantially > faster.
AES-256 does not encrypt any more data per round than AES-128. My guess is that you are thinking about Rijndael with a 256 bit block and a 256 bit key. Brian Gladman --------------------------------------------------------------------- The Cryptography Mailing List Unsubscribe by sending "unsubscribe cryptography" to [EMAIL PROTECTED]