Tessaro: deployed block ciphers span just two paradigms, too few studying them

StefanoMTessaro · x · 2026-11-03

In his exchange with Matthew Green on LLM cryptanalysis, Stefano Tessaro argues people overestimate the space of viable symmetric constructions and underestimate attack generalizability: only two paradigms exist among deployed block ciphers, and too few people study them publicly.

He agrees with Green that AES-128's margin sits at 128 bits since brute-force remains the best known attack on the full cipher, that "more rounds = more security" holds so far, and that narrow cryptanalysis focus is the nature of the discipline.

Related event: Cryptographers Debate Whether LLMs Could Break Symmetric Encryption(6 posts)→

Original post →

More from Research

Research channel →