Re:NIST may not have you in mind
by tptacek on Sunday October 21, 2012 @12:40PM
(#4680012)
Pretty sure that's an S-box AES. The issue is that when implemented (a) in software (b) without reliance on large lookup tables --- ie, "securely" --- AES is significantly slower.