Advanced Encryption Standard
Key Expansion
AES
• Rijndael (pronounced rain-dahl) is the algorithm
that has been selected by the U.S. National
Institute of Standards and Technology (NIST) as
the candidate for the Advanced Encryption
Standard (AES).
• It was selected from a list of five finalists, that
were themselves selected from an original list of
more than 15 submissions.
• Rijndael will replace the Data Encryption Standard
(DES) - and later Triple DES - over the next few
years in many cryptography applications
AES
• The algorithm was designed by two Belgian
cryptologists, Vincent Rijmen and Joan
Daemen, whose surnames are reflected in the
cipher's name.
• Rijndael has its origins in Square, an earlier
collaboration between the two cryptologists.
• The Rijndael algorithm is a new generation
symmetric block cipher that supports key sizes
of 128, 192 and 256 bits
AES
• Rijndael is a family of ciphers with different key
and block sizes.
• AES has been adopted by the U.S.
government and is now used worldwide.
• Rijndael uses a variable number of rounds,
depending on key/block sizes, as follows:
• 9 rounds if the key/block size is 128 bits
• 11 rounds if the key/block size is 192 bits
• 13 rounds if the key/block size is 256 bits
Key Expansion
The key expansion routine functions:
• ROT WORD (rotate)
• SUB WORD (substitution)
• RCON (round constants)
• EK (expanded key)
• K (key)
RCON
2b 28 ab 09
7e ae f7 cf
15 d2 15 4f
16 a6 88 3c
cf 8a
4f 84
ROT WORD SUB WORD
3c AES S-Box eb
09 01
2b 28 ab 09 a0
7e ae f7 cf fa
15 d2 15 4f fe
16 a6 88 3c 17
2b 8a RCON 01 a0
7e 84 00 fa
15
⊕ eb
⊕ 00
= fe
16 01 00 17
2b 28 ab 09 a0 88
7e ae f7 cf fa 54
15 d2 15 4f fe 2c
16 a6 88 3c 17 b1
28 a0 88
ae fa 54
d2
⊕ fe
= 2c
a6 17 b1
2b 28 ab 09 a0 88 23
7e ae f7 cf fa 54 a3
15 d2 15 4f fe 2c 39
16 a6 88 3c 17 b1 39
ab 88 23
f7 54 a3
15
⊕ 2c
= 39
88 b1 39
2b 28 ab 09 a0 88 23 2a
7e ae f7 cf fa 54 a3 6c
Round 1
15 d2 15 4f fe 2c 39 76
16 a6 88 3c 17 b1 39 05
Round 2 Round 3
END