Re: AES or Triple DES?

From: Russ Lyttle (lyttlec_at_earthlink.net)
Date: 06/30/03


Date: Mon, 30 Jun 2003 01:55:08 GMT

fungus wrote:

>
> I'm implementing a cryptosystem and the choice of
> block cipher seems to be between AES and 3DES.
>
> My conservative nature says to go with 3DES but
> the PHBs tell me that "DES" is too old and broken.
>
> AES is the new kid on the block. How is it holding
> up to analysis? I heard there was an attack which
> knocked a few bits off it, making the two pretty
> equivalent in terms of strength (though I believe
> 3DES needs an _awful_ lot of ciphertext for differential
> cryptanalysis to be useful).
>
> I used to know a bit about crypto but I've been out
> of the loop for a while (since before the AES thing).
>
> Any info on AES cracking would be appreciated.
>
>
DES was designed with hardware implementations in mind, not software. So it
is fast if you implement it in an FPGA. AES is more oriented toward
software implementations and so runs faster in software than DES. Example
code for both exists. IMHO, speed issues are no longer relevant. Lots of
example code for DES, 3DES, and AES exist. You didn't say why you were
implementing the crypto system. Instead of writing from scratch, consider
selecting an open source version of one and improving that. Be sure to
check with your professor or boss or customer first.

-- 
Russ Lyttle
Not Powered by ActiveX


Relevant Pages

  • Re: Quadruple Algorithms
    ... occurring" (a fatal flaw being found in AES, ... If you really want secure crypto use various layers of encryption ... with the output of one cipher feeding ...
    (sci.crypt)
  • Re: FUD about CGD and GBDE
    ... at the crypto layer. ... > yield its secrets only one sector at a time and CGD will spill all ... cheaper than cracking AES-256 assuming AES is good. ... You've added substantial complexity behind the scenes, ...
    (freebsd-hackers)
  • Re: Security Engineering vs. Crypto Academics... (was strengthening /dev/urandom)
    ... and weaknesses discovered in the crypto primitives. ... > (it's basically the sum of all of the reseeds plus the number of AES ... > blocks extracted from a particular Fortuna pool). ... I coneeded this is a problem and the proposed change from CTR mode to ...
    (sci.crypt)
  • Re: Matrixview SWISH almost two times better compression then GZIP and much faster
    ... AES instead, because the US ... You can't ever prove that a system is secure. ... exporting crypto from the U.S. is not the big deal it used to ... algorithms like twofish, blowfish, 3DES, etc. ...
    (comp.compression)
  • Re: Meganets "unbreakable" cryptography? Im skeptical.
    ... > In one corner, we have AES. ... > That analysis gives reason for some confidence in the security of AES. ... Look real secure crypto export is controlled in the USA why would ...
    (sci.crypt)

Quantcast