I think it's interesting that there are attacks against AES-256 that don't work against AES-128. Apparently, "the key schedule for 256-bit version is pretty lou

I think it's interesting that there are attacks against AES-256 that don't work against AES-128. Apparently, "the key schedule for 256-bit version is pretty lousy." Surprising, to me at least.