Block cipher/Catalogs/Cipher table

Cipher	Type	Block size	Key size	Rounds	S-boxes	Round function has	Standard in	AES competition	Comment
AES	SP network	128	128,192,256	10 to 14	one 8*8		US, 2002 onward	Winner	current US standard, widely used
DES	Feistel	64	56	16	8 6*4	bit permutation	US, 1976-2002		obsolete, key too short against brute force
Blowfish	Feistel	64	up to 556	16	4 8*32, key-dependent				widely used
CAST-128	Feistel	64	40 to 128	16	4 8*32, using bent functions	key-dependent rotation			widely used, including PGP
GOST cipher	Feistel	64	256	32	8 4*4	rotation	Soviet Union
Skipjack	Feistel, unbalanced	64	80	32					designed by NSA for Clipper chip phones
IDEA		64	128	8	none	modular multiplication	Europe
TEA, Tiny Encryption Algorithm	Feistel	64	128	32	none	only shift, XOR, addition
SAFER SK-128	SP network	64	128	8		pseudo-Hadamard transform	Singapore
SAFER+	SP network	128	128,192,256			pseudo-Hadamard transform		candidate
LOKI97	Feistel	128	128,192,256	16		two SP network rounds		candidate
Serpent	SP network	128	128,192,256	32	8 4*4			finalist
MARS	Feistel-like	128	128,192,256	16	one 9*32	data-dependent rotation		finalist	designed at IBM
CAST-256	Feistel-like	128	128,192,256	48	4 8*32, using bent functions	key-dependent rotation		candidate
Twofish		128	128,192,256	16	key-dependent	pseudo-Hadamard transform		finalist
RC2	Feistel	64		18					often used with 40-bit key, for export
RC5	Feistel	64	128			data-dependent rotation
RC6		128	128,192,256			data-dependent rotation	finalist
DFC, Decorrelated Fast Cipher	Feistel	128	128,192,256	6	one 6*32			candidate
FROG		variable	variable	8				candidate	uses key as program, not just as data
E2		128	128,192,256					candidate
DEAL	Feistel	128	128,192,256		6 or 8	DES as the round function		candidate
CRYPTON	SP network	128	128,192,256					candidate
MAGENTA		128	128,192,256					candidate	quickly broken
Hasty Pudding		variable	variable					candidate	tweakable