New Observations on Rijndael

We summarise some observations on the AES finalist Rijndael. The cipher splits very cleanly into a layer of S-box transformations, a linear diffusion layer designed to provide mixing across the block, and a subkey layer. We show that the linear diffusion layer has some unusual properties.