Re: DES and 3DES

From: Mxsmanic (mxsmanic_at_hotmail.com)
Date: 10/31/04


Date: Sun, 31 Oct 2004 12:24:33 +0100

Subba Rao writes:

> ? 3DES (same as DES) performs 48 rounds (as opposed to 16 rounds of DES)
> of encryption.

No, 3DES is DES repeated three times with (usually) three different
keys.

> What is the default DES or 3DES key length? Is it 56 bit or 128 bit?

Single DES uses a 56-bit key. Triple DES uses a 168-bit key.

> I am under the impression that 3DES always uses 128 bit encryption.

No, normally 3DES is 168 bits. Of course, you can force 40 bits to zero
to make it effectively 128 bits, if needed.

> It is for that reason alone it is more secure. Am I right on that?

Yes. Triple DES is more secure because the effective key length is
longer than it is with single DES.

> Can 3DES encryption be done with smaller key sizes?

Sure, but there would be no point in doing so.

> If yes, is it part of the best practices?

It's not a good idea.

> For encryption/decryption, does 3DES perform 48 rounds on the
> data OR use 3 separate 56-bit keys on the data?

It uses three separate keys. It's DES done three times, with three
keys.

Not that this is more secure only because DES is not a group. In
cryptography, a "group" is a cipher in which consecutive encryption with
any number of keys is no more secure than encryption with a single key.
A simple XOR of the type used for one-time pads is in this category.
DES is not, though, and so multiple encryptions with different keys in
DES are more secure than just one encryption.

-- 
Transpose hotmail and mxsmanic in my e-mail address to reach me directly.


Relevant Pages

  • Re: Encrypting again an already encrypted file increase security ?
    ... > If I encrypt exactly this file again with another encryption algorithm tool ... twice, with different keys. ... because every concatenation of cipher operations is a cipher ... On the other hand, if you do the same with DES, things are different. ...
    (sci.crypt)
  • Re: DES and 3DES
    ... > of encryption. ... Single DES uses a 56-bit key. ... It uses three separate keys. ...
    (sci.math)
  • Re: Encrypt and Decrypt in C#
    ... DES is not "secure". ... it's keys are 56-bits, ... it's used to seed the encryption. ... They are in a separate class. ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: Is two times encrypting ALWAYS more secure than one time encrypting ???
    ... OK, using DES as a specific example, using standard brute force approach ... The methods mentioned above don't work when using 3 different keys, ... simple mistake like forgetting to do the second encryption. ... >>> encryption tools. ...
    (comp.security.misc)
  • Triple DES keys
    ... DES keys are 56 bit. ... The 168-bit key can be made from either TWO different 56-bit keys or THREE ... but is possible in principle) is an attack which works from both ... This results in double-DES only being approx 1-bit stronger (ie ...
    (SSH)