150 likes | 233 Views
Developing the Advanced Encryption Standard (AES). AES Goals. AES keys (128bits) 340,000,000,000,000,000,000,000,000,000,000,000,000 possible keys $250K special purpose HW used in Jan ‘99 demo would require 13,300,000,000,000,000,000 years to search the AES key space.
E N D
AES Goals AES keys (128bits) 340,000,000,000,000,000,000,000,000,000,000,000,000 possible keys $250K special purpose HW used in Jan ‘99 demo would require 13,300,000,000,000,000,000 years to search the AES key space DES keys (56bits) 70,000,000,000,000,000 possible keys Jan ‘99 demo using $250K special purpose HW searched key space in 1 day Secure enough for 20-30+ years Efficient in many environments Available worldwide royalty free Replace aging Data Encryption Standard (DES) Provide a highly secure standard, with wide confidence, to protect sensitive information
Why NIST? • No suitable industry standards • Industry/users looking to NIST for leadership • DES precedent has established public trust and confidence in NIST cryptographic programs and capabilities • NIST’s statutory responsibilities for Federal security standards • Support of Federal agency needs for robust encryption algorithms
IBM Intel 3Com Cylink Certicom MasterCard RSA Laboratories Sun Microsystems Entrust Technologies American Bankers Association Deloitte & Touche Others... Massachusetts Institute of Technology University of California Berkeley Worcester Polytechnic Institute École Normale Supérieure University of Cambridge University of Bergen Katholieke Universiteit Leuven Australian National University Technion Others... AES Industry/Academia Partners Industry Academia
Jan 97 Sept 97 Aug 98 - Apr 99 Aug 99 - May 00 ~Sept 00 ~Sept 00 - Nov 00 ~Summer ‘01 Development of AES criteria Call for candidates 15 Candidates for public comment 5 Finalists for public comment Draft AES announced for comment Public comment period Formal Secretarial approval Final AES in place AES Development Process
An Example of AES Encryption Then repeat this 15-30 times!
AES Evaluation Criteria • Strong Cryptography • AES process engaging worldwide cryptographic community industry and academia • Performance • Software efficiency - NIST’s study in performance • Hardware - NIST/NSA analysis • Flexible e.g. smart cards • Other factors • e.g. intellectual property Performance Demo
AES Candidate Speed (clock cycles) Borland C++ 5.01 200MHz Pentium Pro 64MB RAM Windows95
Public Reaction to AES "NIST's efforts to create the AES to replace DES are important to the development of adequate global information security to a degree that Congress should explicitly authorize and support NIST's efforts...” U.S. Senate Bill S.798, 106th Congress “...people familiar with the process [AES] say it has been managed so fairly and skillfully that the implications for future system developments are already quite clear.” American Banker 8/16/99
Summary • NIST engaging industry and academia to develop next generation encryption standard • Five finalists currently under review • Winners to be announced fall 2000 • Likely widespread deployment of standard • NIST providing cryptographic security leadership