What Is AES-256 Encryption?
AES-256 is the 256-bit-key version of the Advanced Encryption Standard, a symmetric block cipher adopted by the U.S. government in 2001 and used worldwide to protect data. "Symmetric" means the same key encrypts and decrypts; "256" is the key length in bits, giving 2256 possible keys — a number so large that brute-forcing it is considered infeasible for any foreseeable technology.
AES was selected through an open, international competition run by the U.S. National Institute of Standards and Technology (NIST). The winning design, originally called Rijndael, was created by Belgian cryptographers Joan Daemen and Vincent Rijmen. It is now standardized as FIPS 197 and is the default cipher in TLS, disk encryption, Wi-Fi (WPA2/WPA3), VPNs, and virtually every secure messenger.
How AES-256 works
AES encrypts data in fixed 128-bit blocks. It runs the data through a series of rounds — 14 rounds for the 256-bit key size — each applying a set of reversible transformations: byte substitution (SubBytes, using a nonlinear S-box), row shifting (ShiftRows), column mixing (MixColumns), and mixing in a round key (AddRoundKey) derived from the main key. Together these steps thoroughly diffuse and confuse the data, so that changing a single input bit changes roughly half the output bits in an unpredictable way. Decryption applies the inverse steps with the same key.
Why authenticated encryption (GCM) matters
Encrypting data hides it, but on its own it does not prove the ciphertext was not tampered with. That is why modern systems use AES in an authenticated encryption mode, most commonly GCM (Galois/Counter Mode). AES-256-GCM produces both the ciphertext and an authentication tag. If even one bit of the ciphertext (or associated data) is altered, the tag check fails and decryption is rejected. This protects confidentiality and integrity in one step, and it is fast because counter mode can be parallelized.
Is AES-256 unbreakable?
No serious practical attack exists against full AES-256 today. A brute-force search of 2256 keys is far beyond the reach of any computer that could ever be built with known physics. Even large quantum computers, via Grover's algorithm, would only effectively halve the key strength — leaving AES-256 at a comfortable 128-bit security level. In practice, AES is essentially never the weak link; attacks target implementation flaws, weak passwords, key management, or the endpoints instead.
Why AES-256 matters
AES-256 is the workhorse that actually scrambles your data after a key exchange decides on a key. Public-key math (like Diffie–Hellman) is relatively slow and is used only to agree on a shared secret; that secret then keys AES, which encrypts the bulk of your messages and files quickly. Because it is standardized, ubiquitous, and hardware-accelerated on modern phones and laptops (via AES-NI and equivalent instructions), it is both extremely secure and extremely fast.
Common misconceptions
- "AES-256 is always twice as secure as AES-128." Both are considered secure; 256 offers a larger margin, notably against future quantum brute force, not "double" real-world safety.
- "Encryption alone means the data cannot be altered." Only authenticated modes like GCM detect tampering. Plain encryption without a MAC/tag can be manipulated.
- "A stronger cipher means my messages are private." AES protects the payload. Metadata, key handling, and device security still determine your overall privacy.
Where you already rely on AES-256
AES-256 is not an exotic technology reserved for spies; it quietly protects a huge share of everyday digital life. When you load a website over HTTPS, the connection is very often secured with AES. Your phone and laptop use AES for full-disk encryption (FileVault on Mac, BitLocker on Windows, and the hardware-backed encryption in iOS and Android), so a lost device does not mean lost data. Your home Wi-Fi's WPA2 and WPA3 security relies on AES, as do most VPNs, password managers, and encrypted backups. Governments approve AES for protecting classified information up to high levels. Because processors ship with dedicated AES instructions (AES-NI on desktops, similar acceleration on mobile chips), all of this happens at gigabytes per second with negligible battery or performance cost — which is exactly why AES became the universal default rather than a specialist option.
How OSHI uses AES-256
OSHI encrypts message content with AES-256-GCM, the authenticated form of the cipher, so every message is both confidential and tamper-evident. The AES keys are never reused: they are produced by the Double Ratchet, so each message gets a fresh single-use key derived from an X25519 key exchange. This combination delivers forward secrecy on top of AES's raw strength. OSHI is open source under the MIT license.
Related guides & features
End-to-end encryption Double Ratchet Perfect forward secrecy Signal Protocol On-device AI All OSHI features Compare OSHIFrequently Asked Questions
What is AES-256?
AES-256 is the 256-bit-key version of the Advanced Encryption Standard, a symmetric block cipher used worldwide to encrypt data. The same key encrypts and decrypts, and there are 2^256 possible keys.
Is AES-256 unbreakable?
There is no known practical attack against full AES-256. Brute-forcing 2^256 keys is infeasible, and even quantum computers would only reduce it to about 128-bit security, which is still very strong.
What is AES-256-GCM?
GCM (Galois/Counter Mode) is an authenticated encryption mode. AES-256-GCM produces ciphertext plus an authentication tag, so any tampering with the data is detected and decryption is rejected.
What is the difference between AES-128 and AES-256?
They differ in key length and number of rounds. Both are considered secure; AES-256 offers a larger security margin, particularly against potential future quantum brute-force attacks.
Does OSHI use AES-256?
Yes. OSHI encrypts messages with AES-256-GCM, using single-use keys produced by a Double Ratchet over an X25519 key exchange, so each message is confidential, tamper-evident, and forward-secret.
Private messaging, by design
OSHI is a free, open-source, Swiss encrypted messenger. No phone number, no ads, no tracking.