Re: Why is AES more secure than DES??

From: Simon Johnson (Ckwop_at_hotmail.com)
Date: 04/30/03


Date: 30 Apr 2003 06:33:29 -0700


"Yuen" <Yuen@123.com> wrote in message news:<MRsra.24777$1s1.380171@newsfeeds.bigpond.com>...
> I encrypt a block of data 0xFFF times, the result:
> AES128 0.0200(seconds)
> AES256 0.0200(seconds)
> DES 0.4500 (seconds)
>
> AES is much faster, but why is AES more secure than DES??

In short, we don't know it is any more secure. It is *possible* that
DES is more secure than AES.. though the evidence available suggests
it's not.
 
> When cracking a message, faster decryption is easier to crack?? because one
> can guess more password per second.
> The cracking method is "guess all possible password"

Against this attack, AES is alot more secure simply because the number
of keys is huge. There are 2^72 times as many keys for AES as there
are for DES. Even though testing each key may be faster.. you have to
test a huge number of additonal keys.

It is important to realise that the strength of a cipher is not
dependant on only the key. The key size gives you the *maximum* amount
of work required to break the cipher.. There could be mathematical
tricks that allow you to find the key alot faster than this maximum.

It is trying to prevent such tricks being deployed that makes real
world cipher design difficult.

Yours,

Simon.



Relevant Pages

  • Re: AES design - can you help me to understand
    ... I may have incorrectly assumed that the first was the strategy used in AES? ... And this one may be a key dependant scrambling round similar ... Both AES and DES take your secret key and stretch it with a key ... If you really want to compare DES to another cipher compare it to CAST5 ...
    (sci.crypt)
  • Re: Why is AES more secure than DES??
    ... > Interestingly, this means that for badly chosen passwords, DES ... > becomes somewhat more secure than AES because a dictionary attack ... > will take longer using DES than using AES, ... "when surveys of all the world's countries are done, ...
    (sci.crypt)
  • Re: Multiple encryption: again, and again, and again...
    ... |>If Cipher-A is broken throw it away and use a new cipher. ... |>combo cipher is in fact more secure than a single cipher unless you know ... As far as I know AES is secure ... |>reason to assume a combo cipher is more secure. ...
    (sci.crypt)
  • :::AES Questions:::
    ... I'm planning on making a program similiar to SILC, Secure Internet Live ... Conferencing, for windows, i'll need to encrypt messages in real time, ... I'de like to know if AES is the best choice or if maybe some other AES ... candidate, would be more apropriate, or even some other cipher. ...
    (sci.crypt)
  • Re: Secure Science issues preview of their upcoming block cipher
    ... I can come up with a cipher provably just as secure as AES-128 very quickly.... ... formulate AES - it had a catchy title something like "How Many Ways Can You ... I've added the cryptography mail list to this. ...
    (Bugtraq)