The major complaint against AES is that it is very difficult to implement in a data-independent way without hardware support. Bernstein has done some research o

The major complaint against AES is that it is very difficult to implement in a data-independent way without hardware support. Bernstein has done some research on this (http://cr.yp.to/antiforgery/cachetiming-20050414.pdf http://cr.yp.to/antiforgery/cachetiming-20050414.pdf), and a major theme of his research has been designing systems that are friendly to implementers. I have no idea if that is what this specific dig ("they already master the art of snake oil") pertains to.