Who said “32 round Rijndael” in the third AES Conference
This is a historical question. In the third AES Conference of NIST (AES3), April 13-14, 2000, New York, near the end of the conference, one representative for each of the last 5 candidates sit on a table and people asked questions to them.
One interesting question was;
- Except for your proposal for AES, what is your candidate?
As far as I can remember, the representative of Rijndael was the last to answer, was sitting on the right end. The first 3 were simply said The Rijndael. But, the 4. person said I want 32-round Rijndael
- Was he Bruce Schneier? See his
suggeston his Blog. - What was the choice of the representative of Rijndael?
aes rijndael history
edited Nov 13 '18 at 15:21
fgrieu
78k7164328
asked Nov 12 '18 at 19:28
kelalakakelalaka
6,10022142
|
show 1 more comment
This is a historical question. In the third AES Conference of NIST (AES3), April 13-14, 2000, New York, near the end of the conference, one representative for each of the last 5 candidates sit on a table and people asked questions to them.
One interesting question was;
- Except for your proposal for AES, what is your candidate?
As far as I can remember, the representative of Rijndael was the last to answer, was sitting on the right end. The first 3 were simply said The Rijndael. But, the 4. person said I want 32-round Rijndael
- Was he Bruce Schneier? See his
suggeston his Blog. - What was the choice of the representative of Rijndael?
aes rijndael history
edited Nov 13 '18 at 15:21
fgrieu
78k7164328
asked Nov 12 '18 at 19:28
kelalakakelalaka
6,10022142
4
I think it may have been the representative for the Serpent team (Ross Anderson?); however it's been a while...
– poncho
Nov 12 '18 at 19:49
1
So, you were there, too?
– kelalaka
Nov 12 '18 at 19:51
2
Yup...…..………...
– poncho
Nov 12 '18 at 19:52
@kelalaka Rijndael cipher was selected by NIST (==NSA), Serpent had 32 rounds and a high security margin. why Rijndael with 10-14 rounds?? Ask NSA!
– 0skar
Nov 13 '18 at 18:14
@0skar we are not talking about why 10 round. I want to remember historical part of the conference. It is 10 round because the designers are sure about their design?. They even did not consider 16 rounds.
– kelalaka
Nov 13 '18 at 18:31
|
show 1 more comment
This is a historical question. In the third AES Conference of NIST (AES3), April 13-14, 2000, New York, near the end of the conference, one representative for each of the last 5 candidates sit on a table and people asked questions to them.
One interesting question was;
- Except for your proposal for AES, what is your candidate?
As far as I can remember, the representative of Rijndael was the last to answer, was sitting on the right end. The first 3 were simply said The Rijndael. But, the 4. person said I want 32-round Rijndael
- Was he Bruce Schneier? See his
suggeston his Blog. - What was the choice of the representative of Rijndael?
aes rijndael history
edited Nov 13 '18 at 15:21
fgrieu
78k7164328
asked Nov 12 '18 at 19:28
kelalakakelalaka
6,10022142
This is a historical question. In the third AES Conference of NIST (AES3), April 13-14, 2000, New York, near the end of the conference, one representative for each of the last 5 candidates sit on a table and people asked questions to them.
One interesting question was;
- Except for your proposal for AES, what is your candidate?
As far as I can remember, the representative of Rijndael was the last to answer, was sitting on the right end. The first 3 were simply said The Rijndael. But, the 4. person said I want 32-round Rijndael
- Was he Bruce Schneier? See his
suggeston his Blog. - What was the choice of the representative of Rijndael?
aes rijndael history
aes rijndael history
edited Nov 13 '18 at 15:21
fgrieu
78k7164328
asked Nov 12 '18 at 19:28
kelalakakelalaka
6,10022142
edited Nov 13 '18 at 15:21
fgrieu
78k7164328
asked Nov 12 '18 at 19:28
kelalakakelalaka
6,10022142
edited Nov 13 '18 at 15:21
fgrieu
78k7164328
edited Nov 13 '18 at 15:21
fgrieu
78k7164328
edited Nov 13 '18 at 15:21
fgrieu
78k7164328
78k7164328
asked Nov 12 '18 at 19:28
kelalakakelalaka
6,10022142
asked Nov 12 '18 at 19:28
kelalakakelalaka
6,10022142
asked Nov 12 '18 at 19:28
kelalakakelalaka
6,10022142
6,10022142
4
I think it may have been the representative for the Serpent team (Ross Anderson?); however it's been a while...
– poncho
Nov 12 '18 at 19:49
1
So, you were there, too?
– kelalaka
Nov 12 '18 at 19:51
2
Yup...…..………...
– poncho
Nov 12 '18 at 19:52
@kelalaka Rijndael cipher was selected by NIST (==NSA), Serpent had 32 rounds and a high security margin. why Rijndael with 10-14 rounds?? Ask NSA!
– 0skar
Nov 13 '18 at 18:14
@0skar we are not talking about why 10 round. I want to remember historical part of the conference. It is 10 round because the designers are sure about their design?. They even did not consider 16 rounds.
– kelalaka
Nov 13 '18 at 18:31
|
show 1 more comment
4
I think it may have been the representative for the Serpent team (Ross Anderson?); however it's been a while...
– poncho
Nov 12 '18 at 19:49
1
So, you were there, too?
– kelalaka
Nov 12 '18 at 19:51
2
Yup...…..………...
– poncho
Nov 12 '18 at 19:52
@kelalaka Rijndael cipher was selected by NIST (==NSA), Serpent had 32 rounds and a high security margin. why Rijndael with 10-14 rounds?? Ask NSA!
– 0skar
Nov 13 '18 at 18:14
@0skar we are not talking about why 10 round. I want to remember historical part of the conference. It is 10 round because the designers are sure about their design?. They even did not consider 16 rounds.
– kelalaka
Nov 13 '18 at 18:31
4
4
I think it may have been the representative for the Serpent team (Ross Anderson?); however it's been a while...
– poncho
Nov 12 '18 at 19:49
I think it may have been the representative for the Serpent team (Ross Anderson?); however it's been a while...
– poncho
Nov 12 '18 at 19:49
1
1
So, you were there, too?
– kelalaka
Nov 12 '18 at 19:51
So, you were there, too?
– kelalaka
Nov 12 '18 at 19:51
2
2
Yup...…..………...
– poncho
Nov 12 '18 at 19:52
Yup...…..………...
– poncho
Nov 12 '18 at 19:52
@kelalaka Rijndael cipher was selected by NIST (==NSA), Serpent had 32 rounds and a high security margin. why Rijndael with 10-14 rounds?? Ask NSA!
– 0skar
Nov 13 '18 at 18:14
@kelalaka Rijndael cipher was selected by NIST (==NSA), Serpent had 32 rounds and a high security margin. why Rijndael with 10-14 rounds?? Ask NSA!
– 0skar
Nov 13 '18 at 18:14
@0skar we are not talking about why 10 round. I want to remember historical part of the conference. It is 10 round because the designers are sure about their design?. They even did not consider 16 rounds.
– kelalaka
Nov 13 '18 at 18:31
@0skar we are not talking about why 10 round. I want to remember historical part of the conference. It is 10 round because the designers are sure about their design?. They even did not consider 16 rounds.
– kelalaka
Nov 13 '18 at 18:31
|
show 1 more comment
1 Answer
1
active
oldest
votes
This answer is based on Morris Dworkin's report of the conference, so it ultimately relies on its accuracy (it is probably more reliable than memory, though).
Regarding the question "Except for your proposal for AES, what is your candidate?", the report states (page 15):
The panelists were asked which algorithm, other than their own, they
would choose for the AES. Rijmen liked RC6; the other four panelists
said Rijndael if it was extended to 18 or more rounds.
So this suggests that the representative for Rijndael (Vincent Rijmen) chose RC6.
During his presentation at the conference, Bruce Schneier is reported to have ended with the following suggestions (page 15 as well):
He [Schneier] recommended that NIST choose either Rijndael extended to 18
rounds, Serpent, or Twofish for the AES; he favored Twofish
for its efficiency across the board, its unique flexibility, and its
speed-security tradeoff.
Since he suggested 18 rounds here, it would surprise me if he would argue for 32 rounds later the same day.
So the representative who answered "Rijndael with 32 rounds" was either Shai Halevi (MARS), Ron Rivest (RC6) or Ross Anderson (Serpent).
My personal guess would be Ross Anderson (this would make sense because Serpent has 32 rounds). In fact, on page 16 of the report there is some weak evidence pointing in this direction:
Anderson responded to a suggestion to transfer some of
Serpent’s rounds to Rijndael by reiterating his support for 32 round
Serpent with 256 bit keys.
answered Nov 13 '18 at 14:50
AlephAleph
1,0991119
1
It would be nice to hear from people who were at the conference whether or not this roughly corresponds to what they remember.
– Aleph
Nov 13 '18 at 14:57
1
It looks like consensus was on Rijndael extended to 18 rounds, and we got Rijndael with 10, 12 or 14 rounds. That's bait for conspiracy theorists.
– fgrieu
Nov 13 '18 at 15:19
@fgrieu Well, I remember that people are not satisfied with the 10 rounds, considering the future security.
– kelalaka
Nov 13 '18 at 15:25
1
@fgrieu The consensus among the authors of competing submissions ;). I can imagine a few reasons why they wouldn't have recommended Rijndael outright...
– Aleph
Nov 13 '18 at 17:48
add a comment |
Your Answer
StackExchange.ifUsing("editor", function ()
return StackExchange.using("mathjaxEditing", function ()
StackExchange.MarkdownEditor.creationCallbacks.add(function (editor, postfix)
StackExchange.mathjaxEditing.prepareWmdForMathJax(editor, postfix, [["$", "$"], ["\\(","\\)"]]);
);
);
, "mathjax-editing");
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "281"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: false,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
noCode: true, onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fcrypto.stackexchange.com%2fquestions%2f63922%2fwho-said-32-round-rijndael-in-the-third-aes-conference%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
This answer is based on Morris Dworkin's report of the conference, so it ultimately relies on its accuracy (it is probably more reliable than memory, though).
Regarding the question "Except for your proposal for AES, what is your candidate?", the report states (page 15):
The panelists were asked which algorithm, other than their own, they
would choose for the AES. Rijmen liked RC6; the other four panelists
said Rijndael if it was extended to 18 or more rounds.
So this suggests that the representative for Rijndael (Vincent Rijmen) chose RC6.
During his presentation at the conference, Bruce Schneier is reported to have ended with the following suggestions (page 15 as well):
He [Schneier] recommended that NIST choose either Rijndael extended to 18
rounds, Serpent, or Twofish for the AES; he favored Twofish
for its efficiency across the board, its unique flexibility, and its
speed-security tradeoff.
Since he suggested 18 rounds here, it would surprise me if he would argue for 32 rounds later the same day.
So the representative who answered "Rijndael with 32 rounds" was either Shai Halevi (MARS), Ron Rivest (RC6) or Ross Anderson (Serpent).
My personal guess would be Ross Anderson (this would make sense because Serpent has 32 rounds). In fact, on page 16 of the report there is some weak evidence pointing in this direction:
Anderson responded to a suggestion to transfer some of
Serpent’s rounds to Rijndael by reiterating his support for 32 round
Serpent with 256 bit keys.
answered Nov 13 '18 at 14:50
AlephAleph
1,0991119
1
It would be nice to hear from people who were at the conference whether or not this roughly corresponds to what they remember.
– Aleph
Nov 13 '18 at 14:57
1
It looks like consensus was on Rijndael extended to 18 rounds, and we got Rijndael with 10, 12 or 14 rounds. That's bait for conspiracy theorists.
– fgrieu
Nov 13 '18 at 15:19
@fgrieu Well, I remember that people are not satisfied with the 10 rounds, considering the future security.
– kelalaka
Nov 13 '18 at 15:25
1
@fgrieu The consensus among the authors of competing submissions ;). I can imagine a few reasons why they wouldn't have recommended Rijndael outright...
– Aleph
Nov 13 '18 at 17:48
add a comment |
This answer is based on Morris Dworkin's report of the conference, so it ultimately relies on its accuracy (it is probably more reliable than memory, though).
Regarding the question "Except for your proposal for AES, what is your candidate?", the report states (page 15):
The panelists were asked which algorithm, other than their own, they
would choose for the AES. Rijmen liked RC6; the other four panelists
said Rijndael if it was extended to 18 or more rounds.
So this suggests that the representative for Rijndael (Vincent Rijmen) chose RC6.
During his presentation at the conference, Bruce Schneier is reported to have ended with the following suggestions (page 15 as well):
He [Schneier] recommended that NIST choose either Rijndael extended to 18
rounds, Serpent, or Twofish for the AES; he favored Twofish
for its efficiency across the board, its unique flexibility, and its
speed-security tradeoff.
Since he suggested 18 rounds here, it would surprise me if he would argue for 32 rounds later the same day.
So the representative who answered "Rijndael with 32 rounds" was either Shai Halevi (MARS), Ron Rivest (RC6) or Ross Anderson (Serpent).
My personal guess would be Ross Anderson (this would make sense because Serpent has 32 rounds). In fact, on page 16 of the report there is some weak evidence pointing in this direction:
Anderson responded to a suggestion to transfer some of
Serpent’s rounds to Rijndael by reiterating his support for 32 round
Serpent with 256 bit keys.
answered Nov 13 '18 at 14:50
AlephAleph
1,0991119
1
It would be nice to hear from people who were at the conference whether or not this roughly corresponds to what they remember.
– Aleph
Nov 13 '18 at 14:57
1
It looks like consensus was on Rijndael extended to 18 rounds, and we got Rijndael with 10, 12 or 14 rounds. That's bait for conspiracy theorists.
– fgrieu
Nov 13 '18 at 15:19
@fgrieu Well, I remember that people are not satisfied with the 10 rounds, considering the future security.
– kelalaka
Nov 13 '18 at 15:25
1
@fgrieu The consensus among the authors of competing submissions ;). I can imagine a few reasons why they wouldn't have recommended Rijndael outright...
– Aleph
Nov 13 '18 at 17:48
add a comment |
This answer is based on Morris Dworkin's report of the conference, so it ultimately relies on its accuracy (it is probably more reliable than memory, though).
Regarding the question "Except for your proposal for AES, what is your candidate?", the report states (page 15):
The panelists were asked which algorithm, other than their own, they
would choose for the AES. Rijmen liked RC6; the other four panelists
said Rijndael if it was extended to 18 or more rounds.
So this suggests that the representative for Rijndael (Vincent Rijmen) chose RC6.
During his presentation at the conference, Bruce Schneier is reported to have ended with the following suggestions (page 15 as well):
He [Schneier] recommended that NIST choose either Rijndael extended to 18
rounds, Serpent, or Twofish for the AES; he favored Twofish
for its efficiency across the board, its unique flexibility, and its
speed-security tradeoff.
Since he suggested 18 rounds here, it would surprise me if he would argue for 32 rounds later the same day.
So the representative who answered "Rijndael with 32 rounds" was either Shai Halevi (MARS), Ron Rivest (RC6) or Ross Anderson (Serpent).
My personal guess would be Ross Anderson (this would make sense because Serpent has 32 rounds). In fact, on page 16 of the report there is some weak evidence pointing in this direction:
Anderson responded to a suggestion to transfer some of
Serpent’s rounds to Rijndael by reiterating his support for 32 round
Serpent with 256 bit keys.
answered Nov 13 '18 at 14:50
AlephAleph
1,0991119
This answer is based on Morris Dworkin's report of the conference, so it ultimately relies on its accuracy (it is probably more reliable than memory, though).
Regarding the question "Except for your proposal for AES, what is your candidate?", the report states (page 15):
The panelists were asked which algorithm, other than their own, they
would choose for the AES. Rijmen liked RC6; the other four panelists
said Rijndael if it was extended to 18 or more rounds.
So this suggests that the representative for Rijndael (Vincent Rijmen) chose RC6.
During his presentation at the conference, Bruce Schneier is reported to have ended with the following suggestions (page 15 as well):
He [Schneier] recommended that NIST choose either Rijndael extended to 18
rounds, Serpent, or Twofish for the AES; he favored Twofish
for its efficiency across the board, its unique flexibility, and its
speed-security tradeoff.
Since he suggested 18 rounds here, it would surprise me if he would argue for 32 rounds later the same day.
So the representative who answered "Rijndael with 32 rounds" was either Shai Halevi (MARS), Ron Rivest (RC6) or Ross Anderson (Serpent).
My personal guess would be Ross Anderson (this would make sense because Serpent has 32 rounds). In fact, on page 16 of the report there is some weak evidence pointing in this direction:
Anderson responded to a suggestion to transfer some of
Serpent’s rounds to Rijndael by reiterating his support for 32 round
Serpent with 256 bit keys.
answered Nov 13 '18 at 14:50
AlephAleph
1,0991119
edited Nov 13 '18 at 14:54
answered Nov 13 '18 at 14:50
AlephAleph
1,0991119
answered Nov 13 '18 at 14:50
AlephAleph
1,0991119
answered Nov 13 '18 at 14:50
AlephAleph
1,0991119
1,0991119
1
It would be nice to hear from people who were at the conference whether or not this roughly corresponds to what they remember.
– Aleph
Nov 13 '18 at 14:57
1
It looks like consensus was on Rijndael extended to 18 rounds, and we got Rijndael with 10, 12 or 14 rounds. That's bait for conspiracy theorists.
– fgrieu
Nov 13 '18 at 15:19
@fgrieu Well, I remember that people are not satisfied with the 10 rounds, considering the future security.
– kelalaka
Nov 13 '18 at 15:25
1
@fgrieu The consensus among the authors of competing submissions ;). I can imagine a few reasons why they wouldn't have recommended Rijndael outright...
– Aleph
Nov 13 '18 at 17:48
add a comment |
1
It would be nice to hear from people who were at the conference whether or not this roughly corresponds to what they remember.
– Aleph
Nov 13 '18 at 14:57
1
It looks like consensus was on Rijndael extended to 18 rounds, and we got Rijndael with 10, 12 or 14 rounds. That's bait for conspiracy theorists.
– fgrieu
Nov 13 '18 at 15:19
@fgrieu Well, I remember that people are not satisfied with the 10 rounds, considering the future security.
– kelalaka
Nov 13 '18 at 15:25
1
@fgrieu The consensus among the authors of competing submissions ;). I can imagine a few reasons why they wouldn't have recommended Rijndael outright...
– Aleph
Nov 13 '18 at 17:48
1
1
It would be nice to hear from people who were at the conference whether or not this roughly corresponds to what they remember.
– Aleph
Nov 13 '18 at 14:57
It would be nice to hear from people who were at the conference whether or not this roughly corresponds to what they remember.
– Aleph
Nov 13 '18 at 14:57
1
1
It looks like consensus was on Rijndael extended to 18 rounds, and we got Rijndael with 10, 12 or 14 rounds. That's bait for conspiracy theorists.
– fgrieu
Nov 13 '18 at 15:19
It looks like consensus was on Rijndael extended to 18 rounds, and we got Rijndael with 10, 12 or 14 rounds. That's bait for conspiracy theorists.
– fgrieu
Nov 13 '18 at 15:19
@fgrieu Well, I remember that people are not satisfied with the 10 rounds, considering the future security.
– kelalaka
Nov 13 '18 at 15:25
@fgrieu Well, I remember that people are not satisfied with the 10 rounds, considering the future security.
– kelalaka
Nov 13 '18 at 15:25
1
1
@fgrieu The consensus among the authors of competing submissions ;). I can imagine a few reasons why they wouldn't have recommended Rijndael outright...
– Aleph
Nov 13 '18 at 17:48
@fgrieu The consensus among the authors of competing submissions ;). I can imagine a few reasons why they wouldn't have recommended Rijndael outright...
– Aleph
Nov 13 '18 at 17:48
add a comment |
Thanks for contributing an answer to Cryptography Stack Exchange!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
Use MathJax to format equations. MathJax reference.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fcrypto.stackexchange.com%2fquestions%2f63922%2fwho-said-32-round-rijndael-in-the-third-aes-conference%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
4
I think it may have been the representative for the Serpent team (Ross Anderson?); however it's been a while...
– poncho
Nov 12 '18 at 19:49
1
So, you were there, too?
– kelalaka
Nov 12 '18 at 19:51
2
Yup...…..………...
– poncho
Nov 12 '18 at 19:52
@kelalaka Rijndael cipher was selected by NIST (==NSA), Serpent had 32 rounds and a high security margin. why Rijndael with 10-14 rounds?? Ask NSA!
– 0skar
Nov 13 '18 at 18:14
@0skar we are not talking about why 10 round. I want to remember historical part of the conference. It is 10 round because the designers are sure about their design?. They even did not consider 16 rounds.
– kelalaka
Nov 13 '18 at 18:31