Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have learned from Applied Cryptography that triple encryption with three independent keys in encryption-decryption-encryption (EDE) process gives security not higher then $2^{2n}$ when it comes to meet-in-the-middle attack, where $n$ is keysize. If the triple encryption is done in encryption-encryption-encryption (EEE) process instead, is the security still the same as in EDE process or less?

I'm just curious to know how and how much security does this middle decryption provide?

share|improve this question
This isn't quite a duplicate, however a related question (specific to DES) is… – poncho Sep 3 '14 at 20:49
@poncho 20 seconds too slow :) – CodesInChaos Sep 3 '14 at 20:49
@CodesInChaos: hey, if I hadn't bothered typing in all of "This isn't a quite a duplicate...", I would have been first :-) – poncho Sep 3 '14 at 20:56
thnaks pancho for your answer in the related question it cleared a lot :) – Giliweed Sep 4 '14 at 8:51
up vote 7 down vote accepted

EEE and EDE are effectively the same in terms of security. EDE is used because it is "backwards compatible:" by setting all three keys to be the same, it becomes equivalent to just single encryption (E) with that key.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.