Leichter, Jerry wrote:
| Jon Callas wrote:
| > | > | > Moreover, AES-256 is 20-ish percent slower than AES-128. | Compared to AES-128, AES-256 is 140% of the rounds to encrypt 200% as much
| data.
AES-256 has a 256-bit key but exactly the same 128-bit block as AES-128
(and AES-192, for that matter).

|       So when implemented in hardware, AES-256 is substantially faster.
| | AES-256 - 18.26 bits per round
| AES-128 - 12.8 bits per round
| | I imagine that this would matter when the implementation is in a hard disk or
| disk interface.
It would, if it were true.
                                                        -- Jerry
I stand corrected.. The source of my error was reading the rijndael spec, not the nist spec.


The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to [EMAIL PROTECTED]

Reply via email to