AES is a symmetric block-cipher standard for protecting data, including financial transactions and classified information. Also called Rijndael, it replaced DES after a public selection process and remains secure against known practical attacks when implemented correctly. section 1.3 section 5.1
AES defines a family of configurations with these core properties:
- Operates on a 4×4 array of bytes. section 5.1
- Uses a fixed 128-bit block size. section 5.1
- Supports 128-, 192-, and 256-bit keys. section 5.1
When correct AES still fails
An attacker need not break AES’s mathematical theory. A padding-related implementation bug can expose plaintext encrypted by an AES-based system, making the engineering around the cipher the practical attack surface. section 1.3 section 5.1
The operational rule is simple: distinguish the cipher from the system using it. Correctly implemented AES has no known practical attacks, while bugs and unanticipated interactions with machines and data can repeatedly compromise AES-based systems. section 1.3

