RC6 as the AES.
Ronald L. Rivest, Matthew J. B. Robshaw, Yiqun Lisa Yin · 2000
Each of the finalist algorithms appears to offer adequate security, and each offers a considerable number of advantages. Any of the finalists could serve admirably as the AES. However, each algorithm also has one or more areas where it does not fare quite as well as some other algorithm; none of the finalists is outstandingly superior to the rest. – Nechvatal, Barker, Bassham, Burr, Dworkin, Foti, Roback [12]