A panoramic survey of the advanced encryption standard: from architecture to security analysis, key management, real-world applications, and post-quantum challenges

The Advanced Encryption Standard (AES) stands as a cornerstone in contemporary data protection, securing everything from enterprise storage and web traffic to Internet of Things (IoT) devices and high-performance cloud infrastructures. This paper offers a panoramic survey of AES, from its historical foundations and architecture through an exploration of its Substitution-Permutation Network (SPN) design, mathematical foundations in Galois Field arithmetic, and evolution since NIST’s public competition that selected Rijndael. Emphasis is placed on the algorithm’s resistance to classical cryptanalysis such as differential and linear attacks while recognizing that side-channel threats, including power analysis and timing leakage, can undermine even robust ciphers if implementations are flawed. Practical implementations and real-world applications are examined across software libraries, specialized hardware accelerators like Field-Programmable Gate Arrays (FPGAs), and lightweight adaptations for constrained environments, illustrating how factors such as performance, cost, and energy consumption must be balanced against potential vulnerabilities. Subsequently, we compare AES with alternative block and stream ciphers (e.g., 3DES, ChaCha20), underscoring AES’s continuing dominance in both regulated industries and modern cryptographic protocols. Key management emerges as a linchpin, where flawed lifecycle practices or insecure key storage can jeopardize AES’s theoretical security. Finally, the paper addresses looming challenges, chief among them the advent of quantum computing, which motivates hybrid cryptographic schemes that combine AES with post-quantum algorithms. By highlighting cutting-edge research on side-channel mitigations, post-quantum integration, and advanced masking techniques, this survey reaffirms AES’s pre-eminence while mapping out the critical avenues of innovation needed to preserve its resilience in an evolving threat landscape.

Authors

Institutions

Publication Details

Journal
International Journal of Information Security
Published
2025-09-25
DOI
https://doi.org/10.1007/s10207-025-01116-x
Citations
4
Primary Topic
Cryptographic Implementations and Security
Type
article
Field-Weighted Citation Impact
9.92

Funders

Controls
|||
ALL TIME
JAN
FEB
MAR
APR
MAY
JUN
JUL
AUG
SEP
OCT
article

A panoramic survey of the advanced encryption standard: from architecture to security analysis, key management, real-world applications, and post-quantum challenges

Burhan Ul Islam Khan, Amirrudin Kamsin, Abdul Raouf Khan, Reddy Ganesh
4 citations
International Journal of Information Security
Cryptographic Implementations and Security
9.92
article

A panoramic survey of the advanced encryption standard: from architecture to security analysis, key management, real-world applications, and post-quantum challenges

Burhan Ul Islam Khan, Amirrudin Kamsin, Abdul Raouf Khan, Reddy Ganesh
article en
4 citations

Abstract

The Advanced Encryption Standard (AES) stands as a cornerstone in contemporary data protection, securing everything from enterprise storage and web traffic to Internet of Things (IoT) devices and high-performance cloud infrastructures. This paper offers a panoramic survey of AES, from its historical foundations and architecture through an exploration of its Substitution-Permutation Network (SPN) design, mathematical foundations in Galois Field arithmetic, and evolution since NIST’s public competition that selected Rijndael. Emphasis is placed on the algorithm’s resistance to classical cryptanalysis such as differential and linear attacks while recognizing that side-channel threats, including power analysis and timing leakage, can undermine even robust ciphers if implementations are flawed. Practical implementations and real-world applications are examined across software libraries, specialized hardware accelerators like Field-Programmable Gate Arrays (FPGAs), and lightweight adaptations for constrained environments, illustrating how factors such as performance, cost, and energy consumption must be balanced against potential vulnerabilities. Subsequently, we compare AES with alternative block and stream ciphers (e.g., 3DES, ChaCha20), underscoring AES’s continuing dominance in both regulated industries and modern cryptographic protocols. Key management emerges as a linchpin, where flawed lifecycle practices or insecure key storage can jeopardize AES’s theoretical security. Finally, the paper addresses looming challenges, chief among them the advent of quantum computing, which motivates hybrid cryptographic schemes that combine AES with post-quantum algorithms. By highlighting cutting-edge research on side-channel mitigations, post-quantum integration, and advanced masking techniques, this survey reaffirms AES’s pre-eminence while mapping out the critical avenues of innovation needed to preserve its resilience in an evolving threat landscape.

International Journal of Information SecurityVol. 24(5)
State University of Padang (ID), University of Malaya (MY), King Faisal University (SA)
King Faisal University
Openalex Percentile: Top 2%
Cryptographic Implementations and Security
9.92
AI Navigator

Ask Laika to Summarize, Analyze, and Connect papers live on the map.

Summarize Papers & Methodologies

Extract key findings, datasets, and comparative methods across publications.

Benchmark Rankings & Visual Analytics

Rank top research institutions, authors, funders, topics, and journals by Field-Weighted Citation Impact (FWCI) and paper volume with instant charts.

Connect Distant Disciplines

Bridge topological clusters on the map to find hidden collaborative intersections.