AES (Rijndael)
Advanced Encryption Standard (Rijndael) · Also known as: Rijndael, AES encryption, FIPS 197
The Advanced Encryption Standard (AES), also known as Rijndael, is a symmetric block cipher adopted as the official encryption standard by the U.S. government in 2001. It processes data in 128-bit blocks using 128, 192, or 256-bit keys and performs multiple rounds of substitution, permutation, and mixing operations. AES is the most widely used symmetric encryption algorithm today, securing everything from government communications to everyday internet traffic.
Read the full method
Sign in with a free account to read this section.
Method map
The neighbourhood of related methods — select a node to explore.
When to use it
AES is the standard choice for encrypting data at rest and in transit. It is appropriate for protecting sensitive data files, database encryption, encrypted communication channels (TLS/SSL), and disk encryption. AES is faster and more practical than public-key cryptography for bulk data encryption. Use AES-256 for long-term security of classified information, and AES-128 is sufficient for most commercial applications.
Strengths & limitations
- Officially standardized by NIST and adopted globally as the encryption standard
- Extremely efficient in both software and hardware implementations
- Resists all known practical attacks when properly implemented with secure modes of operation
- Available in three key sizes (128, 192, 256 bits) offering flexible security levels
- A block cipher requires a mode of operation (CBC, CTR, GCM, etc.) to encrypt data longer than 128 bits; naive ECB mode is insecure
- Requires careful handling of initialization vectors and nonces in authenticated encryption modes
- No built-in authentication; must be combined with HMAC or used in authenticated modes (GCM) for secure communication
Frequently asked
What is the difference between AES-128, AES-192, and AES-256?
The numbers indicate key size in bits. AES-128 uses a 128-bit key, AES-192 uses 192-bit, and AES-256 uses 256-bit. All three offer strong security; AES-256 is preferred for highly sensitive data requiring long-term confidentiality against future attacks.
Is AES breakable?
No practical break of AES has been found. Theoretical attacks exist but require computational resources far beyond current feasibility. The most efficient known attack remains brute-force key search.
Why can't I just use AES ECB mode?
ECB (Electronic Codebook) encrypts identical plaintext blocks to identical ciphertext blocks, revealing patterns. An image encrypted with ECB often remains partially recognizable. Always use authenticated modes like GCM, CCM, or EAX.
What is the difference between AES and Rijndael?
Rijndael is the original algorithm. AES is Rijndael with specific parameters: 128-bit block size and key sizes of 128, 192, or 256 bits. The original Rijndael supports variable block and key sizes.
Will AES be broken by quantum computers?
Quantum computers pose a much weaker threat to AES than to public-key cryptography. Grover's algorithm could theoretically halve effective key length, so using AES-256 provides safety margin against quantum adversaries.
Sources
- Daemen, J., & Rijmen, V. (2002). The Design of Rijndael: AES - The Advanced Encryption Standard. Springer-Verlag. ISBN: 978-3540425809
- National Institute of Standards and Technology (NIST). (2001). FIPS 197: Specification for the Advanced Encryption Standard (AES). U.S. Department of Commerce. link ↗
How to cite this page
ScholarGate. (2026, June 3). Advanced Encryption Standard (Rijndael). ScholarGate. https://scholargate.app/en/cryptography/aes
Which method?
Set this method beside its closest kin and read them side by side — the library lays the books on the table; the choice is yours.
- Differential CryptanalysisCryptography↔ compare
- HMACCryptography↔ compare
- Linear CryptanalysisCryptography↔ compare
- RSA CryptosystemCryptography↔ compare