Editing Camellia (cipher) (section)

== Performance ==
The S-boxes used by Camellia share a similar structure to AES's S-box. As a result, it is possible to accelerate Camellia software implementations using CPU instruction sets designed for AES, such as x86 [[AES instruction set|AES-NI]] or x86 [[AVX-512#GFNI|GFNI]], by [[affine space|affine isomorphism]].<ref>{{cite thesis | type = M.Sc. | last = Kivilinna | first = Jussi | date = 2013 | url = http://jultika.oulu.fi/files/nbnfioulu-201305311409.pdf | title = Block Ciphers: Fast Implementations on x86-64 Architecture | pages = 33,42 | publisher = [[University of Oulu]] | access-date = 2017-06-22}}</ref><ref>{{cite web | url = https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libgcrypt.git;a=commit;h=9ab61ba24b72bc109b7578a7868716910d2ea9d1 | last = Kivilinna | first = Jussi | date = 2022-05-01 | website = git.gnupg.org Gitweb | access-date = 2022-07-06 | title = camellia: add amd64 GFNI/AVX512 implementation }}</ref>