Block cipher/Catalogs/Cipher table

Block ciphers

Cipher	Type	Block size	Key size	Rounds	S-boxes	Round function has	Standard in	AES competition	Comment
AES	SP network	128	128,192,256	10, 12 or 14	one 8*8		US, 2002 onward	winner	extremely widely used
DES	Feistel	64	56	16	8 6*4	bit permutation	US, 1976-2002		obsolete, key too short against brute force
Triple DES	Feistel	64	112 or 168	48 (3*16)	8 6*4	bit permutation			widely used, but being replaced by AES
Blowfish	Feistel	64	up to 556	16	4 8*32, key-dependent				widely used
CAST-128	Feistel	64	40 to 128	16	4 8*32, using bent functions	key-dependent rotation			widely used, including PGP
GOST cipher	Feistel	64	256	32	8 4*4	rotation	Soviet Union
Skipjack	Feistel, unbalanced	64	80	32					designed by NSA for Clipper chip phones
IDEA		64	128	8	none	modular multiplication	Europe
TEA	Feistel	64	128	32	none	only shift, XOR, addition			small, fast & simple
SAFER SK-128	SP network	64	128	8		pseudo-Hadamard transform	Singapore
SAFER+	SP network	128	128,192,256	8,12 or 15		pseudo-Hadamard transform		candidate
LOKI	Feistel	64	64	16
LOKI97	Feistel	128	128,192,256	16		two SP network rounds		candidate
Serpent	SP network	128	128,192,256	32	8 4*4			finalist
MARS	Feistel-like	128	128,192,256	16	one 9*32	data-dependent rotation		finalist	designed at IBM
CAST-256	Feistel-like	128	128,192,256	48	4 8*32, using bent functions	key-dependent rotation		candidate
Twofish	Feistel	128	128,192,256	16	4 8*8, key-dependent	pseudo-Hadamard transform, rotation		finalist
RC2	Feistel	64	variable	18					often used with 40-bit key, for export
RC5	Feistel	64 or 128	up to 2040	variable		data-dependent rotation
RC6		128	128,192,256			data-dependent rotation		finalist
DFC	Feistel	128	128,192,256	6	one 6*32			candidate
FROG		variable	variable	8				candidate	uses key as program, not just as data
E2	Feistel	128	128,192,256	12	one 8*8			candidate
DEAL	Feistel	128	128,192,256	6 or 8		DES as the round function		candidate
Camellia	Feistel	128	128,192,256	18 or 24					Japanese
SEED	Feistel	128	128	16	2 8*8				Korean
CRYPTON	SP network	128	128,192,256	12				candidate
MAGENTA	Feistel	128	128,192,256	6 or 8				candidate	quickly broken
Hasty Pudding		variable	variable					candidate	tweakable
Threefish	SP network	256,512,1024	256,512,1024	72 or 80					tweakable, used in Skein hash
Whirlpool cipher	SP network	512	512	10					AES-like, used in Whirlpool hash
3-Way	SP network	96	96	11					an ancestor of AES
Square	SP network	128	128	8					an ancestor of AES