【正文】
are implemented simultaneously, although it appears to remain suitable for these environments. The key schedule for decryption is separate from encryption.NIST對 Rijndael的評估( 2022)n Hardware Implementations Rijndael has the highest throughput of any of the finalists for feedback modes and second highest for nonfeedback modes. For the 192 and 256bit key sizes, throughput falls in standard and unrolled implementations because of the additional number of rounds. For fully pipelined implementations, the area requirement increases, but the throughput is unaffected.n Attacks on Implementations The operations used by Rijndael are among the easiest to defend against power and timing attacks. The use of masking techniques to provide Rijndael with some defense against these attacks does not cause significant performance degradation relative to the other finalists, and its RAM requirement remains reasonable. Rijndael appears to gain a major speed advantage over its petitors when such protections are considered.NIST對 Rijndael的評估( 2022)n Encryption vs. Decryption The encryption and decryption functions in Rijndael differ. One FPGA study reports that the implementation of both encryption and decryption takes about 60% more space than the implementation of encryption alone. Rijndael’s speed does not vary significantly between encryption and decryption, although the key setup performance is slower for decryption than for encryption.NIST對 Rijndael的評估( 2022)n Key Agility Rijndael supports onthefly subkey putation for encryption. Rijndael requires a onetime execution of the key schedule to generate all subkeys prior to the first decryption with a specific key. This places a slight resource burden on the key agility of Rijndael.NIST對 Rijndael的評估( 2022)n Other Versatility and Flexibility Rijndael fully supports block sizes and key sizes of 128 bits, 192 bits and 256 bits, in any bination. In