Graph
Serpent

🐍Serpent

NEW

An AES finalist block cipher emphasizing security margin with a conservative design and 32 rounds.

DESCRIPTION

Serpent is a 128-bit block cipher with keys of 128, 192, or 256 bits designed by Anderson, Biham, and Knudsen. It uses an SPN structure with bitsliced S-boxes and 32 rounds to provide a large security margin. Although it did not win the AES competition, Serpent remains respected for its conservative approach. Bitslicing enables efficient software implementations on modern CPUs. It is less deployed than AES but still studied and implemented in some libraries.

ALTERNATIVE DEFINITIONS

University of Cambridge

Serpent is a 128-bit block cipher that was a finalist in the AES competition, designed for a very high security margin.

Highlights AES finalist status and the design choice of a high security margin.

Source

Bruce Schneier

Serpent is a 128-bit block cipher with 32 rounds, designed by Ross Anderson, Eli Biham, and Lars Knudsen as an AES candidate.

Emphasizes 32-round conservative design and authorship.

Source

Twofish Rijndael Substitution–Permutation Network Bitslicing Symmetric Block Cipher Algorithms S-Box Key Schedule MARS RC6

COMPETING TERMS

AES

KNOWLEDGE AREAS

Data Security Software Engineering

TARGET AUDIENCE

Security Architect Cybersecurity Engineer Software Developer

EXTERNAL SOURCES

TOP QUESTIONS

Why is Serpent known for a high security margin?

It uses 32 rounds—more than strictly necessary—to withstand future cryptanalysis, prioritizing robustness over speed.

Category: Concept

How does Serpent compare to AES (Rijndael)?

Serpent is often slower but more conservative in design. AES won due to balanced security, performance, and implementation simplicity.

Category: Comparison

What is bitslicing in Serpent?

Bitslicing processes multiple blocks in parallel at the bit level, enabling efficient software implementations without table lookups.

Category: Concept

Where is Serpent used today?

It appears in some cryptographic libraries and research contexts, but AES dominates mainstream deployments.

Category: Usage

What key sizes does Serpent support?

Keys of 128, 192, and 256 bits, similar to AES options.

Category: Definition

Is Serpent standardized like AES?

No. While a respected AES finalist, it did not become a FIPS standard. It remains available in open implementations.

Category: Opinion

What was the biggest debate about Serpent during AES selection?

Security margin versus performance trade-offs; Serpent favored security, while Rijndael offered better speed and flexibility.

Category: Opinion

Does Serpent support authenticated encryption?

Not inherently; it requires composition with AEAD modes or MACs similar to AES in non-AEAD modes.

Category: Usage

Is Serpent quantum-resistant?

As a symmetric cipher, Serpent’s key sizes mitigate Grover’s algorithm by using larger keys, but it is not specifically post-quantum.

Category: Risks