The Design of Rijndael

By Joan Daemen, Vincent Rijmen. 2002

2,252 citations recorded by the source corpus.

Subfields: Aerospace Engineering, Artificial Intelligence, Political Science and International Relations

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

In Aerospace Engineering

In Artificial Intelligence

In Political Science and International Relations

Citations in the corpus

New Lightweight DES Variants (2007, methodology): “Their AES design is based on a byte-per-byte serialization, which only requires the implementation of a single S-box [DR02] and achieves an encryption within 1032 clock cycles (= 10.”
Theoretical Use of Cache Memory as a Cryptanalytic Side-Channel (2002, methodology): “It would be interesting to investigate other algorithms, such as AES [8], that are based on substitution/permutation network design.”
Provably Secure Higher-Order Masking of AES (2010, methodology): “Multiplications over F28 are typically implemented in software using log/alog tables (see for instance [11]).”
Related-Key Cryptanalysis of the Full AES-192 and AES-256 (2009, background): “The Advanced Encryption Standard (AES) [9] — a 128-bit block cipher, is one of the most popular ciphers in the world and is widely used for both commercial and government purposes.”
Privacy and Access Control for Outsourced Personal Records (2015, methodology): “We use AES [27] as private-key encryption scheme with an appropriate message padding.”
Physically Unclonable Functions (2012, methodology): “They propose a methodology to use the glitch behavior of any combinatorial circuit as a PUF response and apply it specifically to a combinatorial FPGA implementation of the SubBytes operation of AES [34].”
A Theoretical Treatment of Related-Key Attacks: RKA-PRPs, RKA-PRFs, and Applications (2003, background): “Daemen and Rijmen discuss related-key attacks in their book [7] and in their AES submission documents [6] and comment that the diffusion and non-linearity of Rijndael’s key schedule makes it difficult for related-key attacks to pass through the entire cipher.”
Error Characterization, Mitigation, and Recovery in Flash-Memory-Based Solid-State Drives (2017, methodology): “In the controller, data encryption hardware typically employs AES encryption [41, 45, 144, 189], which performs multiple rounds of substitutions and permutations to the unencrypted data in order to encrypt it.”
DFA on AES (2004, background): “For more information, the reader can refer to [16, 10 ].”
GIFT: A Small Present - Towards Reaching the Limit of Lightweight Encryption (2017, background): “Given a linear characteristic with a bias , the square of the correlation contribution (so-called correlation potential [19]) is defined as 4 (2).”
A Practical Wireless Attack on the Connected Car and Security Protocol for In-Vehicle CAN (2015, background): “Since the security of the AES algorithms has been proven in [27], it is clear that the adversary cannot obtain CAN data without a session key.”