AES (FIPS 197) and Block Cipher Modes

1. AES specification (FIPS 197)

   128-bit block cipher with 128, 192 and 256-bit keys: SubBytes, ShiftRows, MixColumns, AddRoundKey.

2. Block cipher modes: ECB, CBC, CFB, OFB, CTR (SP 800-38A)

   Confidentiality modes and why ECB is unsafe.

3. Galois/Counter Mode (SP 800-38D)

   AES-GCM authenticated encryption, IV uniqueness and tag length.

4. CMAC authentication (SP 800-38B)

   Block cipher based message authentication.

5. CCM mode (SP 800-38C)

   Counter with CBC-MAC authenticated encryption.

6. XTS-AES for storage (SP 800-38E)

   Tweakable mode for disk encryption.

7. AEAD interface

   Authenticated encryption interface: key, nonce, associated data, ciphertext.

8. AES key wrap

   Key wrapping algorithm for protecting keys.

9. AES-GCM-SIV

   Nonce misuse resistant authenticated encryption.

Each section links to the official page. Titles and summaries by Extra Credit; the docs belong to their authors.