Block cipher/Catalogs/Cipher table

Cipher	Type	Block size	Key size	Rounds	S-boxes	Round function has	Standard in	AES competition	Comment
AES	SP network	128	128,192,256	10 to 14	one 8*8		US, 2002 onward	winner	extremely widely used
DES	Feistel	64	56	16	8 6*4	bit permutation	US, 1976-2002		obsolete, key too short against brute force
Triple DES	Feistel	64	112 or 168	48 (3*16)	8 6*4	bit permutation			widely used, but being replaced by AES
Blowfish	Feistel	64	up to 556	16	4 8*32, key-dependent				widely used
CAST-128	Feistel	64	40 to 128	16	4 8*32, using bent functions	key-dependent rotation			widely used, including PGP
GOST cipher	Feistel	64	256	32	8 4*4	rotation	Soviet Union
Skipjack	Feistel, unbalanced	64	80	32					designed by NSA for Clipper chip phones
IDEA		64	128	8	none	modular multiplication	Europe
TEA	Feistel	64	128	32	none	only shift, XOR, addition			small, fast & simple
SAFER SK-128	SP network	64	128	8		PHT	Singapore
SAFER+	SP network	128	128,192,256	8,12 or 15		PHT		candidate
LOKI	Feistel	64	64	16					LOKI89 is original version, LOKI91 revised
LOKI97	Feistel	128	128,192,256	16		two SP network rounds		candidate
Serpent	SP network	128	128,192,256	32	8 4*4			finalist
MARS	Feistel-like	128	128,192,256	16	one 9*32	data-dependent rotation		finalist	designed at IBM
CAST-256	Feistel-like	128	128,192,256	48	4 8*32, using bent functions	key-dependent rotation		candidate
Twofish	Feistel	128	128,192,256	16	4 8*8, key-dependent	rotation and PHT		finalist
RC2	Feistel	64	variable	18					often used with 40-bit key, for export
RC5	Feistel	64 or 128	up to 2040	variable		data-dependent rotation
RC6		128	128,192,256			data-dependent rotation		finalist
DFC	Feistel	128	128,192,256	6	one 6*32			candidate
FROG		variable	variable	8				candidate	uses key as program, not just as data
E2	Feistel	128	128,192,256	12	one 8*8			candidate
DEAL	Feistel	128	128,192,256	6 or 8		DES as the round function		candidate
Camellia	Feistel	128	128,192,256	18 or 24					Japanese
SEED	Feistel	128	128	16	2 8*8				Korean
CRYPTON	SP network	128	128,192,256	12				candidate
MAGENTA	Feistel	128	128,192,256	6 or 8				candidate	quickly broken
Hasty Pudding		variable	variable					candidate	tweakable
Threefish	SP network	256,512,1024	256,512,1024	72 or 80					tweakable, used in Skein hash
Whirlpool cipher	SP network	512	512	10					AES-like, used in Whirlpool hash

• "PHT" indicates a pseudo-Hadamard transform.