Advanced Encryption Standard (AES): What It Is and How It Works – Hashed Out by The SSL Store – Hashed Out by The SSL Store
Understanding advanced encryption standard on basic level doesnt require a higher degree in computer science or Matrix-level consciousness lets break AES encryption down into laymans terms
Hey, all. We know of security of information to be a hot topic since, well, forever. We entrust our personal and sensitive information to lots of major entities and still have problems with data breaches, data leaks, etc. Some of this happens because of security protocols in networking, or bad practices of authentication management but, really, there are many ways that data breaches can occur. However, the actual process of decrypting a ciphertext without a key is far more difficult. For that, we can thank the encrypting algorithms like the popular advanced encryption standard and the secure keys that scramble our data into indecipherable gibberish.
Lets look into how AES works and different applications for it. Well be getting a little into some Matrix-based math so, grab your red pills and see how far this rabbit hole goes.
Lets hash it out.
You may have heard of advanced encryption standard, or AES for short but may not know the answer to the question what is AES? Here are four things you need to know about AES:
The National Institute of Standards and Technology (NIST) established AES as an encryption standard nearly 20 years ago to replace the aging data encryption standard (DES). After all, AES encryption keys can go up to 256 bits, whereas DES stopped at just 56 bits. NIST could have chosen a cipher that offered greater security, but the tradeoff would have required greater overhead that wouldnt be practical. So, they went with one that had great all-around performance and security.
AESs results are so successful that many entities and agencies have approved it and utilize it for encrypting sensitive information. The National Security Agency (NSA), as well as other governmental bodies, utilize AES encryption and keys to protect classified or other sensitive information. Furthermore, AES is often included in commercial based products, including but limited to:
Although it wouldnt literally take forever, it would take far longer than any of our lifetimes to crack an AES 256-bit encryption key using modern computing technology. This is from a brute force standpoint, as in trying every combination until we hear the click/unlocking sound. Certain protections are put in place to prevent stuff from like this happening quickly, such as a limit on password attempts before a lockdown, which may or may not include a time lapse, to occur before trying again. When we are dealing with computation in milliseconds, waiting 20 minutes to try another five times would seriously add to the time taken to crack a key.
Just how long would it take? We are venturing into a thousand monkeys working on a thousand typewriters to write A Tale of Two Cities territory. The possible combinations for AES 256-bit encryption is 2256. Even if a computer can do multiple quadrillions of instructions per second, then we are still in that eagles-wings-eroding-Mount-Everest time frame.
Needless to say, its waaaaaaaaaaaaaaaaaaay (theres not enough memory on our computers to support the number of a letters that I want to convey) longer than our current universe has been in existence. And thats just for a 16-byte block of data. So, as you can see, brute forcing AES even if it is 128 bits AES is futile.
That would likely change, though, once quantum computing becomes a little more mainstream, available, and effective. Quantum computing is expected to break AES encryption and require other methods to protect our data but thats still a ways down the road.
Manage Digital Certificates like a Boss
14 Certificate Management Best Practices to keep your organization running, secure and fully-compliant.
To better understand what AES is, you need to understand how it works. But in order to see how the advanced encryption standard actually works, however, we first need to look at how this is set up and the rules concerning the process based on the users selection of encryption strength. Typically, when we discuss using higher bit levels of security, were looking at things that are more secure and more difficult to break or hack. While the data blocks are broken up into 128 bits, the key size have a few varying lengths: 128 bits, 196 bits, and 256 bits. What does this mean? Lets back it up for a second here.
We know that encryption typically deals in the scrambling of information into something unreadable and an associated key to decrypt the scramble. AES scramble procedures use four scrambling operations in rounds, meaning that it will perform the operations, and then repeat the process based off of the previous rounds results X number of times. Simplistically, if we put in X and get out Y, that would be one round. We would then put Y through the paces and get out Z for round 2. Rinse and repeat until we have completed the specified number of rounds.
The AES key size, specified above, will determine the number of rounds that the procedure will execute. For example:
As mentioned, each round has four operations.
So, youve arrived this far. Now, you may be asking: why, oh why, didnt I take the blue pill?
Before we get to the operational parts of advanced encryption standard, lets look at how the data is structured. What we mean is that the data that the operations are performed upon is not left-to-right sequential as we normally think of it. Its stacked in a 44 matrix of 128 bits (16 bytes) per block in an array thats known as a state. A state looks something like this:
So, if your message was blue pill or red, it would look something like this:
So, just to be clear, this is just a 16-byte block so, this means that every group of 16 bytes in a file are arranged in such a fashion. At this point, the systematic scramble begins through the application of each AES encryption operation.
As mentioned earlier, once we have our data arrangement, there are certain linked operations that will perform the scramble on each state. The purpose here is to convert the plaintext data into ciphertext through the use of a secret key.
The four types of AES operations as follows (note: well get into the order of the operations in the next section):
As mentioned earlier, the key size determines the number of rounds of scrambling that will be performed. AES encryption uses the Rjindael Key Schedule, which derives the subkeys from the main key to perform the Key Expansion.
The AddRoundKey operation takes the current state of the data and executes the XOR Boolean operation against the current round subkey. XOR means Exclusively Or, which will yield a result of true if the inputs differ (e.g. one input must be 1 and the other input must be 0 to be true). There will be a unique subkey per round, plus one more (which will run at the end).
The SubBytes operation, which stands for substitute bytes, will take the 16-byte block and run it through an S-Box (substitution box) to produce an alternate value. Simply put, the operation will take a value and then replace it by spitting out another value.
The actual S-Box operation is a complicated process, but just know that its nearly impossible to decipher with conventional computing. Coupled with the rest of AES operations, it will do its job to effectively scramble and obfuscate the source data. The S in the white box in the image above represents the complex lookup table for the S-Box.
The ShiftRows operation is a little more straightforward and is easier to understand. Based off the arrangement of the data, the idea of ShiftRows is to move the positions of the data in their respective rows with wrapping. Remember, the data is arranged in a stacked arrangement and not left to right like most of us are used to reading. The image provided helps to visualize this operation.
The first row goes unchanged. The second row shifts the bytes to the left by one position with row wrap around. The third row shifts the bytes one position beyond that, moving the byte to the left by a total of two positions with row wrap around. Likewise, this means that the fourth row shifts the bytes to the left by a total of three positions with row wrap around.
The MixColumns operation, in a nutshell, is a linear transformation of the columns of the dataset. It uses matrix multiplication and bitwise XOR addition to output the results. The column data, which can be represented as a 41 matrix, will be multiplied against a 44 matrix in a format called the Gallois field, and set as an inverse of input and output. That will look something like the following:
As you can see, there are four bytes in that are ran against a 44 matrix. In this case, matrix multiplication has each input byte affecting each output byte and, obviously, yields the same size.
Now that we have a decent understanding of the different operations utilized to scramble our data via AES encryption, we can look at the order in which these operations execute. It will be as such:
Note: The MixColumns operation is not in the final round. Without getting into the actual math of this, theres no additional benefit to performing this operation. In fact, doing so would simply make the decryption process a bit more taxing in terms of overhead.
If we consider the number of rounds and the operations per round that are involved, by the end of it, you should have a nice scrambled block. And that is only a 16-byte block. Consider how much information that equates to in the big picture. Its miniscule when compared to todays file/packet sizes! So, if each 16-byte block has seemingly no discernable pattern at least, any pattern that can be deciphered in a timely manner Id say AES has done its job.
We know the advanced encryption standard algorithm itself is quite effective, but its level of effectiveness depends on how its implemented. Unlike the brute force attacks mentioned above, effective attacks are typically launched on the implementation and not on the algorithm itself. This can be equated to attacking users as in phishing attacks versus attacking the technology behind the service/function that may be hard to breach. These can be considered side-channel attacks where the attacks are being carried out on other aspects of the entire process and not the focal point of the security implementation.
While I always advocate going with a reasonable/effective security option, a lot of AES encryption is happening without you even knowing it. Its locking down spots of the computing world that would otherwise be wide open. In other words, there would be many more opportunities for hackers to capture data if advanced encryption standard wasnt implemented at all. We just need to know how to identify the open holes and figure out how to plug them. Some may be able to use AES and others may need another protocol or process.
Appreciate the encryption implementations we have, use the best ones when needed, and happy scrutinizing!
- Bismuth's mask uncovered: Implications for quantum computing and spintronics materials - Phys.org - May 15th, 2025 [May 15th, 2025]
- Is NVIDIA (NVDA) the Best Quantum Computing Stock to Invest in Now? - Yahoo Finance - May 15th, 2025 [May 15th, 2025]
- How close is quantum computing to commercial reality? - Computer Weekly - May 15th, 2025 [May 15th, 2025]
- Quantum computing is still in its infancy, but researchers have high hopes - Technical.ly - May 15th, 2025 [May 15th, 2025]
- Quantum computing signals the coming of the API storm - Computer Weekly - May 15th, 2025 [May 15th, 2025]
- Quantinuum Scores a $1 Billion Deal in Qatar. Demand for Quantum Computing Grows Globally. - Barron's - May 15th, 2025 [May 15th, 2025]
- 7 Best Quantum Computing Stocks to Buy This May - 24/7 Wall St. - May 15th, 2025 [May 15th, 2025]
- Quantum Computing (QUBT) Projected to Post Quarterly Earnings on Thursday - MarketBeat - May 15th, 2025 [May 15th, 2025]
- Quantinuum and Al Rabban Capital Launch Joint Venture to Accelerate Quantum Computing Adoption in Qatar and the Region - PR Newswire - May 15th, 2025 [May 15th, 2025]
- Buy or Sell Quantum Computing (QUBT) Stock Ahead of Its Upcoming Earnings? - Forbes - May 15th, 2025 [May 15th, 2025]
- Silicon spin qubits gain ground as a leading candidate for quantum computing - Phys.org - May 15th, 2025 [May 15th, 2025]
- Quantum Computing (NASDAQ:QUBT) Trading 1.5% Higher - Here's What Happened - MarketBeat - May 15th, 2025 [May 15th, 2025]
- Particles can be measured jointly without bringing them togetheran advance for quantum communication and computing - Phys.org - May 15th, 2025 [May 15th, 2025]
- Tel Aviv startup pulls in $110 million to become the Microsoft of quantum computing - The Times of Israel - May 15th, 2025 [May 15th, 2025]
- Quantum Computing Inc. Hosts Ribbon-Cutting to Celebrate Grand Opening of Quantum Photonic Chip Foundry in Tempe, Arizona - Yahoo Finance - May 15th, 2025 [May 15th, 2025]
- Cells Might Be Doing Quantum Computing. Life on Earth Has Performed 10 Logical Operations - ZME Science - May 15th, 2025 [May 15th, 2025]
- How will quantum computing change the world? - Fox Business - May 10th, 2025 [May 10th, 2025]
- Whats next in computing is generative and quantum - IBM Research - May 10th, 2025 [May 10th, 2025]
- Quantum computing gets an error-correction boost from AI innovation - Network World - May 10th, 2025 [May 10th, 2025]
- D-Wave CEO explains where the US is falling behind the rest of the world on quantum computing - Sherwood News - May 10th, 2025 [May 10th, 2025]
- How will quantum computing change the world? - MSN - May 10th, 2025 [May 10th, 2025]
- Editorial: What will it take to realize the potential of quantum computing in chemistry? - C&EN - May 10th, 2025 [May 10th, 2025]
- A Strong Business CaseFor Quantum Computing: How Amazon (NASDAQ:AMZN) Is Taking It On - TipRanks - May 10th, 2025 [May 10th, 2025]
- News | Quantum computing provider teams up with electric utility for expansion in Tennessee - CoStar - May 10th, 2025 [May 10th, 2025]
- B.C.-founded quantum computing firm D-Wave reports record revenue - Business in Vancouver - May 10th, 2025 [May 10th, 2025]
- IonQ Stock Rises on First-Quarter Earnings. Quantum Computing Returns to the Spotlight. - Barron's - May 8th, 2025 [May 8th, 2025]
- Cisco has joined the quantum computing race - qz.com - May 8th, 2025 [May 8th, 2025]
- Scientists discover quantum computing in the brain - The Brighter Side of News - May 8th, 2025 [May 8th, 2025]
- Could quantum computing soon transform the legal system? - The World Economic Forum - May 8th, 2025 [May 8th, 2025]
- Is Mass. ready to make the leap to quantum computing hub? - The Business Journals - May 8th, 2025 [May 8th, 2025]
- China's quantum computing industry has developed replicable, iterative engineering production capabilities: developer - Global Times - May 8th, 2025 [May 8th, 2025]
- ParTec and ORCA Computing Announce Partnership to Deliver Quantum-Accelerated AI Factories - HPCwire - May 8th, 2025 [May 8th, 2025]
- IonQ "got off to a good start," "quantum computing" earnings season is about to be revealed - longportapp.com - May 8th, 2025 [May 8th, 2025]
- 2 Quantum Computing Stocks With Explosive Upside Potential - The Motley Fool - May 8th, 2025 [May 8th, 2025]
- Cisco chip and lab to speed arrival of quantum computing - avinteractive.com - May 8th, 2025 [May 8th, 2025]
- Quantum Computing Inc. to Host First Quarter 2025 Shareholder Call on Thursday, May 15, 2025 - Yahoo Finance - May 8th, 2025 [May 8th, 2025]
- Quantum Computing (NASDAQ:QUBT) Shares Gap Down - Here's What Happened - MarketBeat - May 8th, 2025 [May 8th, 2025]
- 25 New 2x Single Stock ETFs Target AI, Quantum Computing, and Gold Miners: Implications for Crypto Traders - Blockchain News - May 8th, 2025 [May 8th, 2025]
- Quantum computing gears up for its 'ChatGPT Moment' and a potential talent shortage - Business Insider - April 30th, 2025 [April 30th, 2025]
- EPBs Chattanooga Quantum Center Will Offer Quantum Computing and Networking - Telecompetitor - April 30th, 2025 [April 30th, 2025]
- QCI ALERT: Bragar Eagel & Squire, P.C. is Investigating Quantum Computing, Inc. on Behalf of Long-Term Stockholders and Encourages Investors to... - April 30th, 2025 [April 30th, 2025]
- European IT professionals fear impact of quantum computing on cybersecurity - techzine.eu - April 30th, 2025 [April 30th, 2025]
- IonQ Announces $22M Deal with EPB Establishing Chattanooga, Tennessee as the First Quantum Computing & Networking Hub in the U.S. - Business Wire - April 30th, 2025 [April 30th, 2025]
- QUBT Deadline: Rosen Law Firm Urges Quantum Computing Inc. (NASDAQ: QUBT) Stockholders to Contact the Firm for Information About Their Rights -... - April 30th, 2025 [April 30th, 2025]
- Important Quantum Computing Concerns Are Resolving For The Better (NASDAQ:QUBT) - Seeking Alpha - April 30th, 2025 [April 30th, 2025]
- Quantum computing: Revolutionising the future of technology - London Daily News - April 30th, 2025 [April 30th, 2025]
- 3 Reasons to Buy This Artificial Intelligence (AI) Quantum Computing Stock on the Dip - Nasdaq - April 25th, 2025 [April 25th, 2025]
- 3 Reasons to Buy This Artificial Intelligence (AI) Quantum Computing Stock on the Dip - Nasdaq - April 25th, 2025 [April 25th, 2025]
- Yale experts weigh in on the future of quantum computing amid political tension - Yale Daily News - April 25th, 2025 [April 25th, 2025]
- Yale experts weigh in on the future of quantum computing amid political tension - Yale Daily News - April 25th, 2025 [April 25th, 2025]
- Expert outlines impact of quantum computing | UNC-Chapel Hill - The University of North Carolina at Chapel Hill - April 25th, 2025 [April 25th, 2025]
- Levi & Korsinsky Announces the Filing of a Securities Class Action on Behalf of Quantum Computing Inc.(QUBT) Shareholders - PR Newswire - April 25th, 2025 [April 25th, 2025]
- Quantum Computing Market to Hit $2.2B: Survey - IoT World Today - April 25th, 2025 [April 25th, 2025]
- Quantum Computing: The war of stories has already started - businesslife.co - April 25th, 2025 [April 25th, 2025]
- 3 Reasons to Buy This Artificial Intelligence (AI) Quantum Computing Stock on the Dip - The Motley Fool - April 25th, 2025 [April 25th, 2025]
- Why CoreWeave, Quantum Computing, and Digital Turbine Plunged Today - Yahoo Finance - April 25th, 2025 [April 25th, 2025]
- Quantum computing to revolutionise innovation and scientific discovery: Jyotiraditya Scindia - Social News XYZ - April 25th, 2025 [April 25th, 2025]
- Discover Why Quantum Computing Stocks Are Soaring Today - 24/7 Wall St. - April 25th, 2025 [April 25th, 2025]
- Quantum Computing Is a Hot Topic in the Artificial Intelligence Sector. But Which Stocks Will Still be Around Decades From Now? - The Motley Fool - April 10th, 2025 [April 10th, 2025]
- Quantum computing breakthrough could make 'noise' forces that disrupt calculations a thing of the past - Yahoo - April 10th, 2025 [April 10th, 2025]
- JPMorgan Goes Big on Quantum Computing. How It Plans to Use the Technology. - Barron's - April 10th, 2025 [April 10th, 2025]
- The U.S. just made the discovery of the century, this new superconducting material is set to give quantum computing a major boost. - Farmingdale... - April 10th, 2025 [April 10th, 2025]
- The dream of quantum computing is closer than ever - USA Today - April 10th, 2025 [April 10th, 2025]
- Cleveland Clinic hosts forum on quantum computing in healthcare - Cleveland.com - April 10th, 2025 [April 10th, 2025]
- Cloud-based Quantum Computing Market Share, Value, and Growth Analysis | Scope By 2032 - openPR.com - April 10th, 2025 [April 10th, 2025]
- BTQ Technologies Announces Strategic Partnership with QPerfect, Accelerating Neutral Atom Quantum Computing Applications - PR Newswire - April 10th, 2025 [April 10th, 2025]
- The Coming Convergence Of AI And Quantum Computing - Forbes - April 10th, 2025 [April 10th, 2025]
- BTQ Technologies to Invest Over $2 Million in QPerfect to Advance Neutral Atom Quantum Computing - The Quantum Insider - April 10th, 2025 [April 10th, 2025]
- Quantum Computing and Drug Development - - April 10th, 2025 [April 10th, 2025]
- Ep857 The threat and opportunity represented by quantum computing - IBS Intelligence - April 10th, 2025 [April 10th, 2025]
- DARPA Just Picked IonQ in a Major Win for the Quantum Computing Company. Is That Enough to Buy IONQ Stock on the Dip? - Barchart.com - April 10th, 2025 [April 10th, 2025]
- SPECIAL | The dream of quantum computing is closer than ever - iHeart - April 10th, 2025 [April 10th, 2025]
- Google, Microsoft and IBM are bullish on quantum computing. Are the chips of the future for real? - CNBC - April 8th, 2025 [April 8th, 2025]
- Levi & Korsinsky Notifies Shareholders of Quantum Computing Inc.(QUBT) of a Class Action Lawsuit and an Upcoming Deadline - PR Newswire - April 8th, 2025 [April 8th, 2025]
- Cleveland Clinic and CAS to Leverage Quantum Computing and AI in Drug Discovery Effort - HPCwire - April 8th, 2025 [April 8th, 2025]
- How Quantum Computing and Advanced AI Are Redefining the Boundaries of Human Thought - Built In - April 8th, 2025 [April 8th, 2025]
- Bitcoin Developer Proposes Hard Fork to Protect BTC From Quantum Computing Threats - CoinDesk - April 8th, 2025 [April 8th, 2025]
- QUBT INVESTOR ALERT: Bronstein, Gewirtz and Grossman, LLC Announces that Quantum Computing Inc. Investors with Substantial Losses Have Opportunity to... - April 8th, 2025 [April 8th, 2025]
- Quantum Computing Inc. Class Action: The Gross Law Firm Reminds Quantum Computing Inc. Investors of the Pending Class Action Lawsuit with a Lead... - April 8th, 2025 [April 8th, 2025]
- QUBT Investors Have Opportunity to Lead Quantum Computing Inc. Securities Fraud Lawsuit with the Schall Law Firm - PR Newswire - April 8th, 2025 [April 8th, 2025]