01
Symmetric Encryption
The same secret key is used to encrypt and decrypt information. Protecting and managing that key is essential.
DYEWARE SECURITY TECHNOLOGY
AES Encryption
Protecting Information Through Advanced Cryptography.
The Advanced Encryption Standard (AES) is one of the most widely used symmetric encryption algorithms. It is designed to protect digital information by transforming readable data into encrypted information that can only be recovered with the appropriate key.
From personal information to business data and digital communications, AES plays an important role in modern information security.
AES ENCRYPTION
SECURE DATA PROTECTION
01001010 10110100
11001001 01101010
10100101 11010010
11001001 01101010
10100101 11010010
UNDERSTANDING AES
What Is AES Encryption?
AES is a symmetric-key block cipher. It uses the same secret key for encryption and decryption. The algorithm processes information in fixed-size blocks and supports three standardized key lengths.
02
128-Bit Data Blocks
AES processes information in fixed-size blocks of 128 bits, regardless of which supported key length is selected.
03
Multiple Key Lengths
AES supports 128-bit, 192-bit, and 256-bit keys, each with a different number of processing rounds.
AES KEY STRENGTH
Three Standardized Key Lengths
The AES algorithm supports three key lengths. Each provides a different key size and number of encryption rounds.
128
BITS
AES-128
Uses a 128-bit encryption key and performs 10 processing rounds.
Block Size
128 Bits
Rounds
10
192
BITS
AES-192
Uses a 192-bit encryption key and performs 12 processing rounds.
Block Size
128 Bits
Rounds
12
256
BITS
AES-256
Uses a 256-bit encryption key and performs 14 processing rounds.
Block Size
128 Bits
Rounds
14
THE ENCRYPTION PROCESS
How Does AES Work?
AES transforms readable information into ciphertext through a sequence of mathematical and byte-level operations controlled by a secret encryption key.
01
Input Data
The original information, known as plaintext, is prepared for encryption and arranged into 128-bit data blocks.
02
Key Expansion
AES uses a key expansion process to derive a series of round keys from the original secret encryption key.
03
Initial Key Addition
The first round key is combined with the input data through a mathematical operation called AddRoundKey.
04
Encryption Rounds
The data passes through repeated processing stages that include SubBytes, ShiftRows, MixColumns, and AddRoundKey.
05
Final Round
The final round performs SubBytes, ShiftRows, and AddRoundKey. It does not include the MixColumns operation.
06
Encrypted Output
The resulting ciphertext is unreadable without the appropriate secret key and the information required by the selected encryption mode.
INSIDE THE ALGORITHM
The Four AES Transformations
The main AES encryption rounds use four fundamental transformations to process the internal data state.
SubBytes
Replaces each byte in the data state using a substitution table known as the S-box.
ShiftRows
Shifts the rows of the internal data state by different offsets to rearrange the bytes.
MixColumns
Combines the bytes within each column using mathematical operations in a finite field.
AddRoundKey
Combines the current data state with a round key derived from the original encryption key.
ENCRYPTION COMPONENTS
Keys, Blocks, and Initialization Vectors
AES is the core encryption algorithm, but secure implementations also require careful selection of an encryption mode and proper management of cryptographic keys and associated parameters.
Encryption Key
A secret cryptographic value used by AES to encrypt and decrypt information. Keys must be generated and protected appropriately.
Initialization Vector
Certain AES modes use an initialization vector or nonce. Its required properties depend on the selected mode. For example, AES-GCM requires IV uniqueness for a given key.
Block Size
AES always uses a 128-bit block size. The key length does not change the size of the data block.
ENCRYPTION DATA
PLAINTEXT
Readable Data
↓
AES
ENCRYPTION
Secret Key
↓
CIPHERTEXT
Encrypted Data
IMPORTANT SECURITY CONSIDERATIONS
Encryption Is Only Part of Data Security.
Selecting AES does not by itself guarantee that an application or system is secure. A complete implementation must also consider the encryption mode, authentication, key generation, key storage, access controls, and secure handling of sensitive information.
DYEWARE TECHNOLOGY SOLUTIONS
Security Begins with Understanding.
Dyeware believes security should be an important consideration in every digital solution. Learn more about our technology services and security-focused approach.
Contact Dyeware