x²+x+1

x+1

x³+x+1

1

We will waste space on a computer that operates on multiples of 2 (e.g., 2¹⁶ or 2³²).

The algorithm cannot be made secure enough, even for large values of p.

Not all elements have a multiplicative inverse, hence we cannot do decryption.

It is not easy to generate a relatively secure prime number.

In AES the key size is always the same as block size.

AES operates using modular polynomial arithmetic over GF(2ⁿ).

AES s a non-feistel cipher.

Encrypting or decrypting a block in AES takes either 10, 12, or 14 rounds.