HD Doctor Logo

AES-256: What it is, how it works and why it matters

Direct answer

AES-256 (Advanced Encryption Standard with 256-bit key) is the symmetric encryption standard adopted by NIST in 2001, used in virtually every modern security solution.

Full definition

AES is a block cipher operating on 128-bit blocks with 128, 192 or 256-bit keys and 14 transformation rounds in AES-256 mode. Approved by NSA for Top Secret information in the US. Common modes: AES-CBC (Cipher Block Chaining, requires IV), AES-GCM (authenticated, TLS 1.3 standard), AES-XTS (disk standard in BitLocker, FileVault, LUKS). Every modern ransomware (LockBit, BlackCat, Akira, etc.) uses AES-256 to encrypt files individually, and RSA-2048 or ECC to encrypt the AES key. Without the operator's RSA key, decrypting AES is mathematically infeasible: brute-forcing AES-256 is estimated to take more than the age of the universe even with all global computing power.

Need to recover data or have a technical question?

Senior engineers in PT, EN and ES.

Related terms