AES implementations

There are various implementations of the Advanced Encryption Standard, also known as Rijndael.

Libraries

AES speed at 128, 192 and 256-bit key sizes.

Rijndael is free for any use public or private, commercial or non-commercial. The authors of Rijndael used to provide a homepage for the algorithm. Care should be taken when implementing AES in software. Like most encryption algorithms, Rijndael was designed on big-endian systems. For this reason, little-endian systems return correct test vector results only through swapping bytes of the input and output words.

The algorithm operates on plaintext blocks of 16 bytes. Encryption of shorter blocks is possible only by padding the source bytes, usually with null bytes. This can be accomplished via several methods, the simplest of which assumes that the final byte of the cipher identifies the number of Null bytes of padding added.

Careful choice must be made in selecting the mode of operation of the cipher. The simplest mode encrypts and decrypts each 128-bit block separately. In this mode, called "electronic code book (ECB)", blocks that are identical will be encrypted identically. This will make some of the plaintext structure visible in the ciphertext. Selecting other modes, such as empressing a sequential counter over the block prior to encryption (CTR mode) and removing it after decryption avoids this problem.

• Current list of FIPS 197 validated cryptographic modules (hosted by NIST)
• Current list of FIPS 140 validated cryptographic modules with validated AES implementations (hosted by NIST) - Most of these involve a commercial implementation of AES algorithms. Look for "FIPS-approved algorithms" entry in the "Level / Description" column followed by "AES" and then a specific certificate number.

Actionscript 3

• BSD licensed cryptography library that provides several common algorithms including AES-128, AES-192 and AES-256

C/ASM library

• GPL-licensed Nettle library also includes an AES implementation
• GPL-licensed written in C
• A compact byte-oriented AES-256 implementation (C, OpenBSD license)
• A byte-oriented public domain in C
• BSD licensed from Brian Gladman
• Public-domain from D.J. Bernstein
• Public domain C from Philip J. Erdelsky
• Cryptographic Application Programming Interface or CAPI, Microsoft's Cryptography API
• A simple commented implementation in C/C++ aimed at beginners

C++ library

• Botan has implemented Rijndael since its very first release in 2001
• Crypto++ A comprehensive C++ semi-public-domain implementation of encryption and hash algorithms. FIPS validated
• Chris Lomont's version of AES under the zlib License

C# /.NET

• "Keep Your Data Secure with the New Advanced Encryption Standard" A detailed explanation with C# implementation by James D. McCaffrey.
• As of version 3.5 of the .NET Framework, the System.Security.Cryptography namespace contains both a fully managed implementation of AES and a managed wrapper around the CAPI AES implementation.
• Bouncy Castle Crypto Library

Java

• Java Cryptography Extension, integrated in the Java Runtime Environment since version 1.4.2 (see example code)
• Bouncy Castle Crypto Library

JavaScript

• Calculator in java script
• Clipperz Crypto Library, includes an efficient implementation.
• Direct implementation of standard transparently coded, with counter mode of operation
• Calculator showing intermediate values
• Simple 128/192/256-bit AES with hexadecimal inputs
• Gibberish Library, OpenSSL compatible with CBC operation, and very efficient. MIT Licensed
• SlowAES, JavaScript and Python implementation. Apache 2.0 Licensed
• pidCrypt Crypto Library, both CTR and CBC mode of operation. ISC Licensed

Delphi

• Martin Offenwanger's GPL-licensed AES source code written in Delphi
• Arnaud Bouchez's another AES source code written in Delphi and i386 assembler
• David Barton's implementation in Delphi, as part of a suite of hashes and ciphers called DCPcrypt: OIS-Certified open source
• TurboPower Lockbox in an open source AES implementation available on SourceForge. A Delphi 2010 compatible version is available on SongBeamer.

Lisp

• ironclad, Common Lisp cryptography library.
• Common Lisp AES implementations using 8 and 32 bits arithmetic.
• Emacs Lisp

Other languages

• LGPL 128bit Implementation in PHP (Registration required)
• phpseclib LGPL implementation in PHP supporting 128, 192, and 256-bit keys.
• Rijndael Inspector Program made in Flash to encrypt/decrypt using AES-128.
• Crypt::Rijndael for Perl
• Crypto for Erlang implements AES (binding for Openssl)
• Mcrypt for PHP
• dcrypt for the D (programming language) implements AES
• AutoIt implementation by 403forbidden

Applications

Archive and compression tools

• 7z
• PKZIP
• RAR
• WinZip
• Amanda Backup

Disk encryption

• DiskCryptor
• FileVault
• FreeOTFE
• GBDE
• Geli (software)
• LUKS
• TrueCrypt
• Mac OS X

Security for communications in Local Area Networks

• IEEE 802.11i, an amendment to the original IEEE 802.11 standard specifying security mechanisms for wireless networks, uses AES-128 in CCM mode.
• The ITU-T G.hn standard, which provides a way to create a high-speed (up to 1 Gigabit/s) Local area network using existing home wiring (power lines, phone lines and coaxial cables), uses AES-128 for encryption.

Miscellaneous

• GPG, GPL-licensed, includes AES, AES-192, and AES-256 as options.
• IPsec
• IronKey Uses AES 128-bit and 256-bit CBC-mode hardware encryption
• OpenSSL includes AES cipher support as of version 0.9.7 (released in 2002) and is dual-licensed under the terms of the OpenSSL License and the original SSLeay license. FIPS validated via IBM
• Pidgin (software), has a plugin that allows for AES Encryption
• XFire uses AES-128, AES-192 and AES 256 to encrypt usernames and passwords
• YaSSL includes AES cipher support YaSSL HomePage