On: Why 256 bit keys are large enough

[kzrdude]

Does that mean that AES-256 is 'broken' in crypto terms?

[finnw → kzrdude]

It means that if you generate a series of keys by simply incrementing a counter, your 192- and 256-bit keys will be cracked before my 128-bit key.

But if you are generating keys that way, you should probably be more concerned about attacks against the RNG that generated the starting key.

[debacle → kzrdude]

No.

[kzrdude → debacle]

Wikipedia _does_ put AES inside Category:Broken block ciphers.. "Widely cryptanalysed ciphers like Advanced Encryption Standard are considered stronger than un-cryptanalysed ciphers even if there are impractical attacks against them."