What are the negative consequences for choosing 8 S-boxes for DES vs 1 S-box for AES? DES has 8 different S-boxes, and AES has only 1.

What are the negative consequences of such choices?
Implementation complexity in software and constrained hardware.

In Serpent, each round uses the same S-box, even though 8 s-boxes are used. This makes it easier to bitsplice the cipher, or process each 4-bit s-box in parallel.

The minimum gate count for a DES implementation is 2300 gates. For Present it is 1075 gates. 

Software and constrained hardware implementations benefit from a cipher that can be easily serialized.


Hash Functions and RFID Tags: Mind the Gap