Questions tagged [des]

(or Data Encryption Standard), a (symmetric) block cipher using a 64 bit block size, with keys of size 56 bit, the standard US block cipher from 1976 to 2001.

Filter by
Sorted by
Tagged with
0
votes
3answers
107 views

Why didn't people redesign the key scheduling algorithm of DES to use longer keys instead of using 3-DES?

To overcome short key length of DES, Triple DES was devised. What would go wrong or why didn't people redesign the key scheduling algorithm to use longer keys?
0
votes
0answers
24 views

Differential cryptanalysis for DES reduced to Four Rounds and about S/N

I'm reading the paper "Differential Cryptanalysis of the Data Encryption Standard(2009)" and I was stuck in a certain part while reading it. In chapter 4, they explained about differential ...
1
vote
1answer
98 views

2Des is double secure of DES?

I read this question in my book (that doesn't have a response). 2DES is doubly more secure than DES? I know that 2DES can be attacked from meet in the middle ...
1
vote
1answer
81 views

Double 3DES/TDES Encryption

If 3DES/TDES (officially TDEA or Triple DEA - Triple Data Encryption Algorithm) encryption is used twice, using 6 different keys K1-...
2
votes
0answers
36 views

what if the S-boxes in DES were “optimal”

if we assume that the s-boxes in DES were optimal. that is for each s-box, every cell in the DDT equals to 4. is there a differential characteristic in a good probability?
2
votes
3answers
604 views

Does the Initialization Vector in DES have to be 8 bytes long?

I was experimenting around with DES and decided to implement an IV (Initialization Vector) for it. I noticed that in DES, which is 56 bits and 8 parity bits, the IV would be 8 bytes in length. Does ...
1
vote
0answers
32 views

DES/CBC : incorrect first 8 bytes [duplicate]

Question about DES-CBC : how to know IV if I have key, input buffer (plaintext), output buffer (encrypted) and decrypted result where first 8 bytes are incorrect but all other bytes are correct ?"
-2
votes
1answer
56 views

What to pad DES key with? [closed]

As a bit of practice, I'm reinventing the wheel by implementing DES in python. Before I even got beyond the first function, I came across a problem... With key <...
0
votes
1answer
71 views

2DES and 3DES against a DES build with complimentary

I saw this complicated question and I am not really sure about it, would appreciate your view on it. Is the following build stronger than 2DES or 3DES with 2 different keys (or even normal DES)? $...
3
votes
3answers
221 views

How was PC2 designed?

I am trying to understand DES. Can anyone explain the table given in one of the answer DES Key Schedule Algorithm. My question is from where the first entry of Ks comes from. i.e ...
1
vote
0answers
30 views

DES P box design criteria

I hope somebody can help me to find out how DES P box has designed. I am doing DES by hand so I want to know how these numbers are arranged?
0
votes
0answers
52 views

Weakness in double encryption [duplicate]

In the "Introduction to Cryptography: With Coding Theory" by Trappe and Washington, in the chapter about DES algorithm the authors say that: "If double encryption is equivalent to single encryption,...
15
votes
1answer
5k views

Why is double encryption that's equivalent to single encryption no better than single encryption?

In the "Introduction to Cryptography: With Coding Theory" by Trappe and Washington, in the chapter about DES algorithm the authors say that: "if a cryptosystem is such that double encryption is ...
0
votes
0answers
33 views

Lineary of Sbox in DES

I'm not a mathematician, and i would like to understand in the most concise way (if possible) why choosing linear S-Box functions makes the DES algorithm attackable. Thanks
2
votes
1answer
57 views

Property of a good cipher system

In the "Introduction to Cryptography: With Coding Theory" by Trappe and Washington, in the chapter about DES algorithm the authors say that: "In a good cipher system, each bit of the ciphertext ...
5
votes
5answers
479 views

Why use complex encryption algorithms? [duplicate]

I have recently gotten interested in cryptography, so I looked some things up. I thought, why even use AES or DES or any other complex way for encrypting data when there are far simpler ways, like ...
3
votes
0answers
78 views

Effect of longer key on DES security

I am reading a book on cryptography and the author states that one of the complaints of the research community was that DES key length was chosen to be too short. I am trying to depict how DES would ...
-1
votes
1answer
50 views

One way secure DES key transfer to defend against attacker [closed]

I have a question about cryptanalysis. A transmit message to B with radio waves, A use modulator to transmit bytes with radio, B obviously use demodulator. A encrypts and B decrypts the messages ...
0
votes
0answers
41 views

In DES : Matsui's notation(LC) vs Biham's notation(DC)

I'm doing linear attack for 8 rounds DES. And I just wondering about the difference between matsui's notation and Biham's notation. In Matsui's paper, numbers bits from 0 to 63 from right to left. In ...
0
votes
1answer
59 views

Calculating DES key knowing message before and after encryption [duplicate]

I've 8 bytes before encryption (for example: 01 02 03 04 05 06 07 08) and 8 bytes after DES encryption: ...
1
vote
1answer
67 views

Attacking Double DES (OFB Mode) given the initialization vector and not much else? [closed]

I'm given a Plaintext/Ciphertext pair, a Ciphertext to break, and the IV. One thing of note is that the same IV is used for both DES Encryptions, so $$C = E_{K_2}(E_{K_1}(P, IV), IV)$$ I have limited ...
0
votes
1answer
55 views

Can I change the S-box and P-box in DES?

I am a newbie to crypto and just one quick question on the s-box and p-box of DES. I understood that the s-box is where the security comes from and NSA has somehow decided how it should be filled in. ...
0
votes
1answer
76 views

How DES/AES can guarantee by feeding different secret keys, the encrypted outputs are different?

I am learning the meet-in-the-middle on DES attack. I understood the basic logic behind how it is performed; however, one further question is: why can we guarantee to find one and only one pair of k1 ...
0
votes
0answers
34 views

I'm studying about differential cryptanalysis in DES. I need to make the DDT through python [duplicate]

I just made DES algorithm(encryption, decryption) using python. And I want to attack 1,2 4,8 .. round DES. For that, I need to make the DDT code. Could you guys help me to make the DDT? Thank you.
2
votes
1answer
73 views

Block cipher information leakage using same key

This is from a previous exam question and I'm not really sure how to approach this properly We're using a block-cipher mode that encrypts $C_i$ = $E_k$ ($P_i$ $\oplus$ $C_{i-1}$ $\oplus$ $P_{...
0
votes
0answers
53 views

Meet-in-the-middle attack (different block cipher modes)

Does a meet-in-the-middle attack on depend on the used modes for block ciphers? encryption: $C_i$ = $D_{K2}$($D_{K1}$($E_{K1}$($P_i$ $\oplus$ $C''_{i-1}$))) $\oplus$ $C'_{i-1}$ and $IV_1$ = $C''_0$ = ...
3
votes
1answer
173 views

DES - Weakness in Sbox

In the book "Introduction to Cryptography with Coding Theory ", in the chapter about the Differential Cryptanalysis for Four Rounds for DES algorithm, the authors say: There is a weakness in the ...
1
vote
1answer
72 views

Why is DES secure against differential cryptanalysis

I was wondering, why DES is secure against Differential Attacks. Some of the S-Boxes have a very bad Differential Uniformity, only one has a DU of 4, 3 have a DU of 6 and the others are much worse. ...
1
vote
0answers
31 views

Meet-in-the-middle attack (on custom encryption scheme) [duplicate]

This is a question I had from an exercise session. Exercise: First we do DES in CBC encryption mode using a key $K_1$ and $IV_1 = O^n$. Then we do DES in ECB decryption mode using $K_1$. And then DES ...
0
votes
1answer
60 views

Symmetric encryption construction (meet-in-the-middle attack)

This is a question I had from an exercise session. First we do DES in CBC encryption mode using a key $K_1$ and $IV_1 = O^n$. Then we do DES in ECB decryption mode using $K_1$. And then DES in CBC ...
1
vote
2answers
186 views

DES parity bits

The key is nominally stored or transmitted as 8 bytes, each with odd parity. According to ANSI X3.92-1981 (Now, known as ANSI INCITS 92-1981), section 3.5: One bit in each 8-bit byte of ...
1
vote
0answers
57 views

Can $AES_{k1}(m)$ be equal to $AES_{k2}(m)$? [duplicate]

Context: We have a generic bloc cipher composed of an encryption function $E_k$ and a decryption function $D_k$ operating on blocs of $n$ bits. For a key $k$ fixed, we can see $E_k$ as a pseudo-...
1
vote
1answer
179 views

What are the separate single DES keys from a triple DES key?

Suppose my 192 bit triple DES key (in hex) is 0123456789ABCDEFFEDCBA987654321089ABCDEF01234567 What are the keys for the separate single DES operations? In this ...
0
votes
0answers
58 views

good OmegaP for characteristic to use in differential cryptanalysis on DES

how to choose a good OmegaP(input difference) for the characteristic used in differential crypt-analysis on DES?
0
votes
2answers
144 views

Is there any encryption algorithm that, with small change in input will produce big change in the encrypted output?

As stated in the title, I'm looking for an encryption algorithm with the characteristics that, when inputs are slightly different, the encrypted output will be VERY much different, to the point that ...
2
votes
0answers
51 views

differential cryptanalysis on the second round of 4-variant DES

I am using differential cryptanalysis to attack the second key of a 4-variant DES and I am using Shamir and biham book as a reference . they say that we should choose two input Xor P3 and P4 that ...
1
vote
1answer
81 views

Security of a block cipher if double encryption $E_{K_2} \circ E_{K_1}$ is always single encryption $E_{f(K_1,K_2)}$

If there always existed a $k_3$ such that $\operatorname{DES}(k_2, \operatorname{DES}(k_1, M)) = \operatorname{DES}(k_3, M)$, how would that affect the security of $\operatorname{DES}$?
1
vote
1answer
93 views

Getting the s-box input from its output in differential cryptanalysis on DES

If we try to get K4 using differential cryptanalysis on 4-variant DES, how can we get the input of a certain S-box if we know it's output? This seems hard to do since the substitution operation is ...
0
votes
0answers
48 views

Determine the original input to the S-Boxes

The 8 S-boxes of DES were designed to provide resistance against attacks. Small modifications to an S-box can significantly weaken DES. Can the original input (the result of XOR on the expansion ...
0
votes
0answers
82 views

Is it possible for an attacker to determine the original input to the S-Boxes in DES?

I am learning about DES, a Feistel 64-bit block cipher with 16 rounds. Is it possible that an intruder can determine the original input to the S-Boxes?
0
votes
0answers
37 views

triple-des simple questtion [duplicate]

Why do we use encrypt-decrypt-encrypt (EDE) in 3DES, rather than encrypting three times? in this link, we use EDE Mode usually. when we use one key, in this case, Encryption -> Decryption result ...
3
votes
1answer
532 views

Would DES be secure with 128 bit keys?

Assuming you only modify the key schedule so that each of a 128-bit key is used at least once, would DES be about as secure as other ciphers such as AES? I am not talking about 2DES/3DES or other ...
12
votes
1answer
2k views

Can neural cryptanalysis be applied to AES?

In this Wikipedia article about Neural cryptography (section applications) it states: In 1995, Sebastien Dourlens applied neural networks to cryptanalyze DES by allowing the networks to learn how ...
2
votes
1answer
175 views

DES/AES invertibility

My professor has posted a couple of practice questions that so far I haven't been able to find the answer for and I was hoping you could help. DES would remain invertible—it would still be ...
1
vote
2answers
58 views

External data loading in DES

Trying to write a C program that implements the DES standard (FIPS 46-3). I am unsure about how the standard should be interpreted when computing the various permutations specified in the document, ...
1
vote
1answer
184 views

Parity checking on DES key if using ASCII chars

This is my first question here, so if I ask it to the wrong group or otherwise infringing the (written or unwritten) rules of the community, please bear with me. My problem is this: In an exercise in ...
3
votes
0answers
46 views

Is uneven DES keybit use exploitable?

Question: Is there any cryptanalytic leverage to be had from the fact that some of the 56 "raw" keybits of DES are used more & less often than others? Observation: over the course of the 16 ...
2
votes
1answer
218 views

Would XDES be more secure than 3DES, where X is a number > 3?

Would XDES be more secure than 3DES, where X is a number > 3? Like 10DES... If so why aren't we using it?
2
votes
1answer
331 views

One-round feistel network (DES) attack

I can't find out how to break 1 round of feistel network (obtaining the key). I understand why this equation takes place: $R_1 \oplus L_0 = f(R_0, k_1)$ EDIT: The function f looks like this: But ...
2
votes
2answers
181 views

64 DES full example with all the stages

I'm trying to write a code to perform encryption and decryption of 64-bit DES but I'm having a problem in verifying that my code is working correctly. My graduation project is about DES crypt-analysis ...