Re: DESCryptoServiceProvider weak and semi-weak keys [ADDITION]

From: Ivan Medvedev [MS] (ivanmed_at_online.microsoft.com)
Date: 08/27/03


Date: Wed, 27 Aug 2003 09:47:34 -0700


You can call DES.IsWeakKey(byte[] key) yourself (it is a public static
methnod) and see if your generated key is weak.

The weak DES keys are:
0101010101010101
fefefefefefefefe
1f1f1f1f0e0e0e0e
e0e0e0e0f1f1f1f1

Semiweak:
0x01fe01fe01fe01fe
0xfe01fe01fe01fe01
0x1fe01fe00ef10ef1
0xe01fe01ff10ef10e
0x01e001e001f101f1
0xe001e001f101f101
0x1ffe1ffe0efe0efe
0xfe1ffe1ffe0efe0e
0x011f011f010e010e
0x1f011f010e010e01
0xe0fee0fef1fef1fe
0xfee0fee0fef1fef1

Although nowdays DES itself is weak. I recommend that you consider using a
more strong algorithm such as TripleDES or Rijndael.

--Ivan
This posting is provided "AS IS" with no warranties, and confers no rights.

"I.Charitopoulos" <i.charitopoulos@mellon.com.gr> wrote in message
news:OrvTDAIbDHA.1600@TK2MSFTNGP09.phx.gbl...
> And also, is there *any* way to disable the isWeakKey and isSemiWeakKey
> calls in general?
>
> Yes... I *am* mad by wanting to do so :)
>
>