Block cipher/Catalogs/Cipher table

<td>

Cipher	Type	Block size	Key size	Rounds	S-boxes	Round function has	Standard in	AES competition	Comment
AES, Advanced Encryption Standard	SP network	128	128,192,256	10 to 14	one 8*8		US, 2002 onward	Winner	current US standard, widely used
DES, Data Encryption Standard	Feistel	64	56	16	8 6*4	bit permutation	US, 1976-2002		obsolete, key too short against brute force
Blowfish	Feistel	64	up to 556	16	4 8*32, key-dependent				widely used
CAST-128	Feistel	64	40 to 128	16	4 8*32, using bent functions	key-dependent rotation			widely used, including PGP
GOST cipher	Feistel	64	256	32	8 4*4	rotation	Soviet Union
IDEA, International Data Encryption Algorithm		64	128	8	none	modular multiplication	Europe
TEA, Tiny Encryption Algorithm	Feistel	64	128	32	none			only shift, XOR, addition
SAFER SK-128	SP network	64	128	8		pseudo-Hadamard transformation	Singapore
SAFER+	SP network	128	128,192,256			pseudo-Hadamard transformation		candidate
LOKI97	Feistel	128	128,192,256	16		two SP network rounds		candidate
Serpent	SP network	128	128,192,256	32	8 4*4			finalist
MARS	Feistel-like	128	128,192,256	16	one 9*32	data=dependent rotation		finalist	designed at IBM
CAST-256	Feistel-like	128	128,192,256	48	4 8*32, using bent functions	key-dependent rotation		candidate
Twofish		128	128,192,256	16	key-dependent	pseudo-Hadamard transformation		finalist
RC2	Feistel	64		18					often used with 40-bit key, for export
RC5	Feistel	64	128			data-dependent rotation
RC6		128	128,192,256			data-dependent rotation	finalist
DFC, Decorrelated Fast Cipher	Feistel	128	128,192,256	6	one 6*32			candidate
FROG		variable	variable	8				candidate	uses key as program, not just as data
E2		128	128,192,256				candidate
DEAL	Feistel	128	128,192,256					candidate	uses DES as the round function
CRYPTON	SP network	128	128,192,256					candidate
MAGENTA		128	128,192,256					candidate	quickly broken
Hasty Pudding		variable	variable				candidate	tweakable