The Twofish algorithm 

General  

Designers  Bruce Schneier 
First published  1998 
Derived from  Blowfish, SAFER, Square 
Certification  AES finalist 
Cipher detail  
Key sizes  128, 192 or 256 bits 
Block sizes  128 bits 
Structure  Feistel network 
Rounds  16 
Best public cryptanalysis  
Truncated differential cryptanalysis requiring roughly 2^{51} chosen plaintexts.^{[1]} 
In cryptography, Twofish is a symmetric key block cipher with a block size of 128 bits and key sizes up to 256 bits. It was one of the five finalists of the Advanced Encryption Standard contest, but was not selected for standardisation. Twofish is related to the earlier block cipher Blowfish.
Twofish's distinctive features are the use of precomputed keydependent Sboxes, and a relatively complex key schedule. One half of an nbit key is used as the actual encryption key and the other half of the nbit key is used to modify the encryption algorithm (keydependent Sboxes). Twofish borrows some elements from other designs; for example, the pseudoHadamard transform (PHT) from the SAFER family of ciphers. Twofish uses the same Feistel structure as DES.
On most software platforms Twofish is slightly slower than Rijndael (the chosen algorithm for Advanced Encryption Standard) for 128bit keys, but somewhat faster for 256bit keys.^{[2]}
Twofish was designed by Bruce Schneier, John Kelsey, Doug Whiting, David Wagner, Chris Hall, and Niels Ferguson; the "extended Twofish team" who met to perform further cryptanalysis of Twofish and other AES contest entrants included Stefan Lucks, Tadayoshi Kohno, and Mike Stay.
The Twofish cipher has not been patented and the reference implementation has been placed in the public domain. As a result, the Twofish algorithm is free for anyone to use without any restrictions whatsoever. It is one of a few ciphers included in the OpenPGP standard (RFC 4880). However, Twofish has seen less widespread usage than Blowfish, which has been available for a longer period of time.
Contents 
As of 2008, the best published cryptanalysis on the Twofish block cipher is a truncated differential cryptanalysis of the full 16round version. The paper claims that the probability of truncated differentials is 2^{57.3} per block and that it will take roughly 2^{51} chosen plaintexts (32 PiB worth of data) to find a good pair of truncated differentials.^{[1]}
Bruce Schneier responds in a 2005 blog entry that this paper does not present a full cryptanalytic attack, but only some hypothesized differential characteristics: "But even from a theoretical perspective, Twofish isn't even remotely broken. There have been no extensions to these results since they were published in 2000."^{[3]}
Twofish
In cryptography, Twofish is a symmetric key block cipher with a block size of 128 bits and key lengths up to 256 bits.
In 1997, the NIST announced for competition to choose a successor to DES to be known as AES, Twofish was one of the five finalists of the Advanced Encryption Standard competition, but was not selected as a standard.
Twofish is related to the earlier block cipher Blowfish. Twofish's main features are the use of precomputed keydependent Sboxes, and a relatively complex key schedule. One half of an nbit key is used as the actual encryption key and the other half of the nbit key is used to modify the encryption algorithm (keydependent Sboxes). Twofish uses some elements from other designs; for example, the pseudoHadamard transform (PHT) from the SAFER family of ciphers. Twofish uses the same Feistel structure as the DES.
On most software platforms Twofish is slightly slower than Rijndael (the chosen algorithm for Advanced Encryption Standard) for 128bit keys, but somewhat faster for 256bit keys.^{[1]}
Twofish was designed by Bruce Schneier, John Kelsey, Doug Whiting, David Wagner, Chris Hall, and Niels Ferguson; the "extended Twofish team" who met to made further cryptanalysis of Twofish and other AES competitors included Stefan Lucks, Tadayoshi Kohno, and Mike Stay.
Twofish algorithm is free for anyone to use without any restrictions whatsoever. The Twofish cipher has not been patented and the software example of its specification has been placed in the public domain. However, Twofish is not widely used like the Blowfish, which has been available for a longer period of time.
Contents 
As of 2008, the best published cryptanalysis on the Twofish block cipher is a truncated differential cryptanalysis of the full 16round version. The paper claims that the probability of truncated differentials attacks is 2^{57.3} per block and that it will take about 2^{51} chosen plaintexts (32 PiB worth of data) to find a good pair of truncated differentials.^{[2]}
Bruce Schneier responds in a 2005 blog entry that this paper does not present a full cryptanalytic attack, but only some hypothesized differential characteristics: "But even from a theoretical perspective, Twofish is not even remotely broken. There have been no extensions to these results since they were published" in 2000.^{[3]}
