Tag Info

New answers tagged


"Not vulnerable" is not how I would describe it, but my understanding is that the existing attacks on DES cannot directly not work with 3DES. At the moment, the best attack against single DES is a linear attack which requires $2^{43}$ plaintext-ciphertext pairs, and has a time complexity of at between $2^{39}$ and $2^{43}$ operations. Linear cryptanalysis ...


Differential cryptanalysis on DES requires 2^{47} chosen plaintext pairs. Linear cryptanalysis on DES requires 2^{43} know plaintext pairs. They both work, but are both unlikely to be more applicable than a brute force search in practice.

Top 50 recent answers are included