案例库 · 软件与 IT · 技术决策 · 1997–2001
这条还没译成中文，下面是英文原文。
AES became the world's cipher because NIST ran an open contest and the winner was free.
NIST chose the AES through a public international competition, and Rijndael won on security, speed and efficiency, with no royalties and no fanfare.
National Institute of Standards and Technology
那一手
The Data Encryption Standard, chosen in 1977, was showing its age, and by the late 1990s government and industry wanted a stronger symmetric cipher to protect sensitive data into the future.
NIST ran the search as an open international competition starting in September 1997, asking researchers to submit algorithms that had to support 128, 192 and 256-bit keys, and had the worldwide cryptographic community attack and scrutinize them.
Fifteen candidates were narrowed to five, and in October 2000 NIST chose Rijndael, designed by Joan Daemen and Vincent Rijmen. It was selected for the best combination of security, performance, efficiency and flexibility, and the pair agreed the algorithm could be used without royalty fees.
NIST incorporated Rijndael into FIPS 197, published in November 2001. Because it ran fast on ordinary processors and cheaply on custom hardware with no licensing cost, it became the default symmetric cipher used across banking, the internet and devices.
为什么管用
- The open competition let the best algorithm win on merit rather than on a vendor's influence.
- Rijndael was fast and efficient on very different hardware, so it did not need specialty silicon to be practical.
- The creators agreed to no royalties, so no one had to pay to implement the standard.
- Judged by the global cryptographic community, the algorithm carried the credibility that made adoption safe.
可以搬走什么
A standard gains universal adoption when you pick it in the open and choose the option that is cheapest and freest to implement, because then everyone can use it and no one resists.
后来呢
AES became the approved symmetric cipher for the US government and the de facto standard worldwide, and the open-competition model NIST used replaced the closed, committee-style selections that had produced DES.
资料来源
- Commerce Secretary Announces New Standard for Global Information Security
- FIPS 197: Advanced Encryption Standard (AES)
发现哪里写错了？告诉我们。