Beginner Topic 14 of 51 Security & Cryptography
AES
Widely used block cipher standard.
How it works
The Advanced Encryption Standard is a symmetric block cipher chosen by NIST in 2001, operating on 128-bit blocks with key sizes of 128, 192 or 256 bits. It runs 10, 12 or 14 rounds of substitution, row shifting, column mixing and key addition on a four by four byte state, designed from the Rijndael cipher. Modern CPUs include AES instructions, making it very fast in hardware and software.
Step-by-step walkthrough
- AES encrypts 128-bit blocks with a 128, 192 or 256-bit key.
- The state is first mixed with the key.
- It then runs 10 to 14 rounds of substitution, shifting and mixing.
- Each round also uses a round key derived from the key.
- The final block is the ciphertext, and hardware makes it very fast.
Where it is used
It protects HTTPS traffic, Wi-Fi with WPA2 and WPA3, full-disk encryption such as BitLocker and FileVault, messaging apps, database encryption and government data. AES-GCM is a popular authenticated mode.
Common pitfall
AES is secure, but misuse is not: ECB mode reveals patterns, nonce reuse in GCM is catastrophic, and padding oracles break CBC mode without authentication. Key handling matters more than key size. Implementations without hardware support can leak timing information through table lookups. Use well-reviewed libraries, not hand-written code.
Where it fits in the course
AES is topic 14 of 51 in Security & Cryptography, rated Beginner. It follows Symmetric Encryption. The next topic is Asymmetric Encryption.
Practice and explore
- Open the interactive lesson, with a mini quiz.
- Take the Security & Cryptography quiz.
How to study this topic
- Read the explanation above and restate the definition in your own words.
- Open the interactive lesson and answer its mini quiz.
- Read the common pitfall, then write a short example that avoids it.
- Check your understanding in the Security & Cryptography quiz, and revisit the topic if you miss a question.
Frequently asked questions
What is AES?
Where do people use AES?
What is the most common mistake with AES?
What should I learn before this topic?
How can I practice it?
Is AES hard to learn?
How long does it take to learn AES?
Which topics are related to AES?
What should I study after AES?
Related topics
- Symmetric Encryption (Security & Cryptography)
- Asymmetric Encryption (Security & Cryptography)
- Encryption Basics (Security & Cryptography)
- RSA (Security & Cryptography)