[aes] Что-то я не понял, что хорошо, а что плохо.

http://awesometrousers.net/post/165807984/crypto-gram-august-15-2009

Seems there is an issue with the number of rounds for AES with larger keys. The overall security of AES-256 is apparently on par with AES-128 due to the number of rounds.

… for new applications I suggest that people don’t use AES-256. AES-128 provides more than enough security margin for the foreseeable future. But if you’re already using AES-256, there’s no reason to change.

— Bruce Schneier