Block cipher/Catalogs/Cipher table

Cipher	Type	Block size	Key size	Rounds	S-boxes	Round function has	Standard in	AES competition	Comment
AES	SP network	128	128,192,256	10 to 14	one 8*8		US, 2002 onward	Winner	current US standard, widely used
DES	Feistel	64	56	16	8 6*4	bit permutation	US, 1976-2002		obsolete, key too short against brute force
Blowfish	Feistel	64	up to 556	16	4 8*32, key-dependent				widely used
CAST-128	Feistel	64	40 to 128	16	4 8*32, using bent functions	key-dependent rotation			widely used, including PGP
GOST cipher	Feistel	64	256	32	8 4*4	rotation	Soviet Union
Skipjack	Feistel, unbalanced	64	80	32					designed by NSA for Clipper chip phones
IDEA		64	128	8	none	modular multiplication	Europe
TEA	Feistel	64	128	32	none	only shift, XOR, addition
SAFER SK-128	SP network	64	128	8		PHT	Singapore
SAFER+	SP network	128	128,192,256			PHT		candidate
LOKI	Feistel	64	64	16					LOKI89 is original version, LOKI91 revised
LOKI97	Feistel	128	128,192,256	16		two SP network rounds		candidate
Serpent	SP network	128	128,192,256	32	8 4*4			finalist
MARS	Feistel-like	128	128,192,256	16	one 9*32	data-dependent rotation		finalist	designed at IBM
CAST-256	Feistel-like	128	128,192,256	48	4 8*32, using bent functions	key-dependent rotation		candidate
Twofish	Feistel	128	128,192,256	16	4 8*8, key-dependent	rotation and PHT		finalist
RC2	Feistel	64		18					often used with 40-bit key, for export
RC5	Feistel	64	128			data-dependent rotation
RC6		128	128,192,256			data-dependent rotation		finalist
DFC	Feistel	128	128,192,256	6	one 6*32			candidate
FROG		variable	variable	8				candidate	uses key as program, not just as data
E2		128	128,192,256					candidate
DEAL	Feistel	128	128,192,256	6 or 8		DES as the round function		candidate
CRYPTON	SP network	128	128,192,256					candidate
MAGENTA		128	128,192,256	6 or 8				candidate	quickly broken
Hasty Pudding		variable	variable					candidate	tweakable

"PHT" indicates a pseudo-Hadmard transform.