Editing Advanced Encryption Standard (section)

== Performance ==
High speed and low RAM requirements were some of the criteria of the AES selection process. As the chosen algorithm, AES performed well on a wide variety of hardware, from 8-bit [[smart card]]s to high-performance computers.

On a [[Pentium Pro]], AES encryption requires 18 clock cycles per byte (cpb),<ref>{{cite web |url=http://www.schneier.com/paper-aes-performance.pdf |title=Performance Comparisons of the AES submissions |last1=Schneier |first1=Bruce |last2=Kelsey |first2=John |last3=Whiting |first3=Doug |last4=Wagner |first4=David |last5=Hall |first5=Chris |last6=Ferguson |first6=Niels |date=1999-02-01 |access-date=2010-12-28 |url-status=live |archive-url=https://web.archive.org/web/20110622084238/http://www.schneier.com/paper-aes-performance.pdf |archive-date=2011-06-22}}</ref> equivalent to a throughput of about 11&nbsp;MiB/s for a 200&nbsp;MHz processor.

On [[Intel Core]] and [[AMD Ryzen]] CPUs supporting [[AES instruction set|AES-NI instruction set]] extensions, throughput can be multiple GiB/s.<ref>{{cite web |url=https://www.vortez.net/articles_pages/amd_ryzen_7_1700x_review,7.html |title=AMD Ryzen 7 1700X Review}}</ref> On an Intel [[Westmere (microarchitecture)|Westmere]] CPU, AES encryption using AES-NI takes about 1.3 cpb for AES-128 and 1.8 cpb for AES-256.<ref>{{cite web |title=Intel ® Advanced Encryption Standard (AES) New Instructions Set |url=https://www.intel.com/content/dam/doc/white-paper/advanced-encryption-standard-new-instructions-set-paper.pdf |date=May 2010}}</ref>