Re: Why is 3DES favoured over AES?



On 18/05/2011 10:10, Mok-Kong Shen wrote:

3DES seems to be favoured over AES in certain practical use today, e.g.
in VISA. Why is this so?

1) Inertia rules the universe.

2) The above rule applies especially when there is no visible benefit to change, when change is costly, or when in the banking domain; all of this apply in the case of VISA. In particular, I know no foreseeable weakness attributable to 3DES in the context of banking, even when restricted to 112-bit keys.

3) Implementation of 3DES with countermeasures against side-channel attacks is well studied, and available in hardware (thus faster than AES in software) on virtually all Smart Card microprocessors, including those costing a fraction of an euro used in bank Smart Cards, and have common-criteria evaluation to EAL4+ or better. This is not yet as common/cheap with AES.

Francois Grieu
.



Relevant Pages

  • Re: Why is 3DES favoured over AES?
    ... this apply in the case of VISA. ... and available in hardware (thus faster than AES ... in software) on virtually all Smart Card microprocessors, ... common-criteria evaluation to EAL4+ or better. ...
    (sci.crypt)
  • Re: Why is 3DES favoured over AES?
    ... change, when change is costly, or when in the banking domain; ... this apply in the case of VISA. ... and available in hardware (thus faster than AES ... and now that their protocol is in 100 ...
    (sci.crypt)
  • Re: Why is 3DES favoured over AES?
    ... change, when change is costly, or when in the banking domain; ... this apply in the case of VISA. ... and available in hardware (thus faster than AES ... It is tiny in memory. ...
    (sci.crypt)
  • Re: Misc Expansion, OSs, development and project proposals.
    ... DSP hardware (although some chip mfrs aiming at smart card apps do have ... I worked at EuroSignCard Luxembourg in 2000 and I was involved in the eEurope Smart Card Charter, learning about the OTA. ... VISA would have done a better job by accepting a smart card with Forth on chip. ...
    (comp.lang.forth)