> > I also read some pages about a (very theoretical) attack of AES. Does > > somebody have benchmarks for AES128, AES256 and other ciphers like > twofish > > etc? Are the performance differences between these ciphers even > noticeable > > on a P4 3 GHz running database services and Samba? > > I don't have a link for benchmarks but would be interested in one > though. By rule of thumb, you won't notice loop-AES on such a large > machine if the server load is low/medium. AES is implemented in > optimized assembler code. > > AES was picked because of its strength and speed. Serpent made 2nd > place (it's considered slightly stronger than AES but slower - IIRC). Yes, but if I read the source code correctly, only AES128 is asm pentium optimized, not AES256. For security of AES and Serpent have a look at: http://www.cryptosystem.net/aes/ If speed isnt really a problem with modern hardware, it would be nice to know the opinion of crypto analysts which one the safest cipher is according to current knowledge. - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/