信息安全导论课程-ch05-AES分析.pptVIP

从3DES到AES 3DES(FIPS 46-3)的优点是能继续使用原有的DES软硬件模块，保护了投资； 缺点是速度慢，而且64位分组显得太小。 AES是重新遴选和设计的代替DES/3DES的下一代对称算法推荐标准。 DES/AES之外还有其他很多对称算法可用，也包括流密码等。 5.1 AES的准则 AES Homepage /aes/ /CryptoToolkit/aes/ FIPS 197 时间表 1997年，要求算法公开、自由，密钥128＋ 1998/8/20，征集到15个候选算法 1999/3,4，经分析开会讨论落实了5个算法 MARS, RC6, Rijndael, Serpent, Twofish 2000/10/2，选定Rijndael为AES 2001/11，FIPS 197 AES要求 1997 年 4 月的 AES 研讨 对称分组算法 支持标准密码本方式（ECB模式） 要明显比 DES3 有效，即比3DES安全(且快) 密钥大小可变，128、192、256等可选 计算上较小的时间、空间复杂性 便于软、硬件方式及各种场合实现 公开和免费许可 公开定义、公开评估、公正公开的选择 可同时供政府和商业使用 AES介绍 AES大会 AES1 in Ventura, California, on August 20-22 1998 AES2 held on March 22-23, 1999, in Rome, Italy AES3 held on April 13-14, 2000, at the Hilton New York and Towers in New York, New York, USA AES Round 1 Candidate Algorithms (I) Algorithm Name Submitter Name(s) CAST-256 Entrust Technologies, Inc. (represented by Carlisle Adams) CRYPTON Future Systems, Inc. (represented by Chae Hoon Lim) DEAL Richard Outerbridge, Lars Knudsen DFC CNRS - Ecole Normale Superieure (represented by Serge Vaudenay) E2 NTT - Nippon Telegraph and Telephone Corporation (by Masayuki Kanda) FROG TecApro Internacional S.A. (represented by Dianelos Georgoudis) HPC Rich Schroeppel (II) Algorithm Name Submitter Name (s) LOKI97 Lawrie Brown, Josef Pieprzyk, Jennifer Seberry MAGENTA Deutsche Telekom AG (represented by Dr. Klaus Huber) MARS IBM (represented by Nevenko Zunic) RC6TM RSA Laboratories (by Burt Kaliski) RIJNDAEL Joan Daemen, Vincent Rijmen SAFER+ Cylink Corporation (represented by Charles Williams) SERPENT Ross Anderson, Eli Biham, Lars Knudsen TWOFISH Bruce Schneier, John Kelsey, Doug Whiting, David Wagner, Chris Hall, Niels erguson AES Round 2 Finalists Algorithm Name Submitter Name (s) MARS IBM (represented by Nevenko Zunic) RC6TM RSA Laboratories (represented by Burt Kaliski) Rijndael Joan Daemen, Vincent Rijmen