Twofish's distinctive features are the use of pre-computed key-dependent S-boxes, and a relatively complex key schedule. On most software platforms Twofish is slightly slower than AES for 128-bit keys, but somewhat faster for 256-bit keys.
As of Sept. 2002 there is no known attack on Twofish more efficient than brute force key search.
Publications: