Can you keep a secret? This encrypted drive can...

David Johnston dj at
Sun Dec 3 14:03:18 EST 2006

Jon Callas wrote:
> Moreover, AES-256 is 20-ish percent slower than AES-128. 
Compared to AES-128, AES-256 is 140% of the rounds to encrypt 200% as 
much data. So when implemented in hardware, AES-256 is substantially faster.

AES-256 - 18.26 bits per round
AES-128 - 12.8 bits per round

I imagine that this would matter when the implementation is in a hard 
disk or disk interface.

The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo at

More information about the cryptography mailing list