Advanced Encryption Standard

Key Expansion
 AES
• Rijndael (pronounced rain-dahl) is the algorithm
that has been selected by the U.S. National
Institute of Standards and Technology (NIST) as
the candidate for the Advanced Encryption
Standard (AES).

• It was selected from a list of five finalists, that

were themselves selected from an original list of
more than 15 submissions.

• Rijndael will replace the Data Encryption Standard

(DES) - and later Triple DES - over the next few
years in many cryptography applications
 AES
• The algorithm was designed by two Belgian
cryptologists, Vincent Rijmen and Joan
Daemen, whose surnames are reflected in the
cipher's name.

• Rijndael has its origins in Square, an earlier

collaboration between the two cryptologists.

• The Rijndael algorithm is a new generation

symmetric block cipher that supports key sizes
of 128, 192 and 256 bits
 AES
• Rijndael is a family of ciphers with different key
and block sizes.

• AES has been adopted by the U.S.

government and is now used worldwide.

• Rijndael uses a variable number of rounds,

depending on key/block sizes, as follows:
• 9 rounds if the key/block size is 128 bits
• 11 rounds if the key/block size is 192 bits
• 13 rounds if the key/block size is 256 bits
 Key Expansion
The key expansion routine functions:

• ROT WORD (rotate)

• SUB WORD (substitution)
• RCON (round constants)
• EK (expanded key)
• K (key)
RCON
2b 28 ab 09

7e ae f7 cf

15 d2 15 4f

16 a6 88 3c

cf 8a

4f 84
ROT WORD SUB WORD
3c AES S-Box eb

09 01
2b 28 ab 09 a0

7e ae f7 cf fa

15 d2 15 4f fe

16 a6 88 3c 17

2b 8a RCON 01 a0

7e 84 00 fa

15
⊕ eb
⊕ 00
= fe

16 01 00 17
2b 28 ab 09 a0 88

7e ae f7 cf fa 54

15 d2 15 4f fe 2c

16 a6 88 3c 17 b1

28 a0 88

ae fa 54

d2
⊕ fe
= 2c

a6 17 b1
2b 28 ab 09 a0 88 23

7e ae f7 cf fa 54 a3

15 d2 15 4f fe 2c 39

16 a6 88 3c 17 b1 39

ab 88 23

f7 54 a3

15
⊕ 2c
= 39

88 b1 39
2b 28 ab 09 a0 88 23 2a

7e ae f7 cf fa 54 a3 6c
Round 1
15 d2 15 4f fe 2c 39 76

16 a6 88 3c 17 b1 39 05

Round 2 Round 3
END