Re: Using Weak keys in DES and TripleDES

From: Valery Pryamikov (valery_at_harper.no)
Date: 03/24/05 

Date: Thu, 24 Mar 2005 17:51:26 +0100

Hi,
you can use simple DES instead of TripleDES. 3DES EDE is just
DES_Encrypt(K3, DES_Decrypt(K2, DES_Encrypt(K3, data_block))). So, you'll be
able to use it with key1==key2 (but not with all zeros key).

-Valery.
http://www.harper.no/valery

"Mark Oeltjenbruns" <fastercat@gmail.com> wrote in message
news:eeBIKwIMFHA.2420@TK2MSFTNGP12.phx.gbl...
> I'm trying to use TripleDESCryptoServiceProvider to encrypt some data to
> authenticate with a DESFire card, however, the default key is 16 zeros
> which
> causes a CryptographicExecption to be thrown; it complains about weak
> keys.
> The card also supports Key1 = Key2, which gives DES support; This also
> throws the weak keys exception. I know that using these 'weak' keys is
> bad,
> but I have no choice; I can't change to strong keys without first using
> the
> weak key to authenticate to the card. Is there a way to flag that it is
> ok
> to use weak keys? The 2nd problem I could overcome by checking the key
> and
> using the DES provider, but this seems rather clunky.
>
> Any thoughts?
>
>

Relevant Pages

  • Re: cryptohistory (DES...)
    ... > DES EEE may have 1-key compatibility due to weak keys, ... > just quirks of DES? ...
    (sci.crypt)
  • Re: Crypto Mini-FAQ
    ... > pointless (in encryption applications). ... weak keys should be eschewed if at all possible, ... as are several of the semi-weak keys. ...
    (sci.crypt)
  • Re: Crypto Mini-FAQ
    ... I'd want to avoid at least the four weak keys: ... I'd say that's not worth defending against. ... one of those keys was used. ...
    (sci.crypt)
  • Re: CLR/3DES/WeakKey Exception
    ... When I attempt to use the test vectors of NIST ... are not any of the known 4 weak keys, or 6 pair of semi-weak keys. ... but I verified that the Handbook of Applied Cryptography also listed ...
    (microsoft.public.platformsdk.security)
  • Re: Crypto Mini-FAQ
    ... The first time I went through the Crypto Mini-FAQ, I had to reread the ... DES keys which are widely known as "weak" or "semi-weak" keys, ... I'd want to avoid at least the four weak keys: ...
    (sci.crypt)