Rijndael

Rijndael
John Savard · CC0 · source
Name	Rijndael
Designers	Vincent Rijmen; Joan Daemen
Published	1998
Derived from	Square
Key size	128, 192, 256 bits
Block size	128, 192, 256 bits (original Rijndael)
Structure	Substitution–permutation network
Rounds	10, 12, 14 (for AES key sizes)

Rijndael is a symmetric block cipher designed by Vincent Rijmen and Joan Daemen and published in 1998. It served as the basis for the Advanced Encryption Standard selection, offering variable block size and key size options and a substitution–permutation network structure. Rijndael influenced implementations across industry and academia, informing standards, hardware design, and cryptanalytic research.

History and development

Rijndael emerged from cryptographic research associated with projects at Katholieke Universiteit Leuven and collaborations with researchers involved in Eurocrypt, FSE (Fast Software Encryption), and RSA Conference presentations. The cipher was submitted to the National Institute of Standards and Technology competition to replace Data Encryption Standard after public calls in the late 1990s. The design drew on earlier work including Square (cipher), and discussions among cryptographers such as Shai Halevi, John Kelsey, Scott Fluhrer, Bruce Schneier, and Niels Ferguson influenced evaluation and public commentary. During the AES competition, Rijndael competed with ciphers like Serpent (cipher), Twofish, RC6, and MARS (cipher), and underwent analysis by teams from University of California, Berkeley, Technische Universität Darmstadt, École Normale Supérieure, and cryptanalysis groups associated with IACR (International Association for Cryptologic Research). In 2001, NIST announced Rijndael as the winner of the AES process, an outcome shaped by performance tests from vendors including Intel Corporation, IBM, Microsoft Corporation, and academic benchmarks from Cornell University and MIT.

Design and algorithm

Rijndael's design implements a substitution–permutation network inspired by earlier ciphers analyzed in conferences like Crypto and EUROCRYPT. The algorithm operates on a two-dimensional state array and employs an S-box derived from finite field inversion in GF(2^8) combined with an affine transformation, reflecting mathematics studied by researchers at Université Catholique de Louvain and influenced by algebraic techniques used by Claude Shannon in communication theory. Core operations include byte substitution, row shifting, column mixing, and round key addition, leveraging arithmetic over Galois fields and linear transformations akin to those analyzed in papers by Don Coppersmith and Adi Shamir. Design choices balanced resistance to differential and linear cryptanalysis examined by scholars like Eli Biham and Lars Knudsen, and considered implementation constraints relevant to companies such as Sun Microsystems and ARM Holdings.

Key schedule and round functions

Rijndael's key schedule expands input keys using word rotations, substitution via the cipher's S-box, and round constants derived from exponentiation in GF(2^8), topics investigated by researchers including Alex Biryukov and Mihir Bellare. The round function for AES-mode variants applies SubBytes, ShiftRows, MixColumns, and AddRoundKey steps; rounds count depends on key length (10, 12, 14) paralleling analyses from laboratories at NIST, University of Luxembourg, and Technische Universität Darmstadt. The MixColumns operation uses an MDS matrix concept related to Maximum Distance Separable codes studied by coding theorists at institutions such as École Polytechnique Fédérale de Lausanne and INRIA. Key schedule properties prompted examination by cryptanalysts including David Wagner, Thomas Berson, and Jakob Groth, leading to proofs-of-concept for related-key attacks and proposals for countermeasures in protocol design by standards bodies like IETF.

Security and cryptanalysis

Extensive cryptanalysis assessed Rijndael against differential, linear, interpolation, integral, and algebraic attacks by contributors from Eurocrypt and Crypto communities including Joan Daemen (co-designer), Vincent Rijmen (co-designer), Alex Biryukov, Aleksandr Bogdanov, Ferdinand Magun, Xiaoyun Wang, and Håvard Helleseth. Truncated differential and integral attacks demonstrated reduced-round weaknesses in experimental settings reported at FSE workshops and by research groups at Queensland University of Technology and Aarhus University. Algebraic cryptanalysis and side-channel analyses advanced by teams at University of California, San Diego and École Normale Supérieure examined equation systems and leakage-resilience; countermeasures were proposed by practitioners at Cryptography Research, Inc. and device designers at Intel and ARM. NIST's security evaluations and later industry advisory groups including ENISA considered these results in recommending AES usage modes and key-management practices for protocols such as TLS, IPsec, and Kerberos.

Implementations and performance

Rijndael/AES saw broad software and hardware implementations from vendors and open-source projects: OpenSSL, LibreSSL, GnuTLS, Bouncy Castle (cryptography), and products by Microsoft and Apple Inc.. Hardware acceleration instructions like AES-NI from Intel Corporation and extensions in ARMv8-A reduced latency in servers by vendors such as Cisco Systems and Juniper Networks. Embedded implementations were produced for platforms including ARM Cortex-M, Atmel AVR, Xilinx FPGA and evaluated in benchmarks by SPEC and academic groups at ETH Zurich and University of Cambridge. Performance engineering efforts by teams at Google and Amazon Web Services focused on parallelization in modes like GCM and integration with HSM devices from Thales Group and Entrust.

Standardization and adoption

Following selection by NIST in 2001, Rijndael was published as FIPS 197 and adopted in international standards including ISO/IEC 18033-3 and various profiles by IETF (RFCs for TLS and IPsec). Governments and organizations—such as European Commission, US Department of Defense, National Security Agency guidance documents, and corporations like Visa and Mastercard—incorporated AES into compliance frameworks including Payment Card Industry Data Security Standard and FIPS 140-2 certifications. Cryptographic libraries and standards committees from IEEE, OASIS, and ITU-T integrated AES and its modes into protocols for secure communications, storage, and trusted computing endorsed by vendors including IBM, Oracle Corporation, and SAP SE.

Category:Block ciphers