Skip to main content

Questions tagged [des]

(or Data Encryption Standard), a (symmetric) block cipher using a 64 bit block size, with keys of size 56 bit, the standard US block cipher from 1976 to 2001.

Filter by
Sorted by
Tagged with
0 votes
0 answers
34 views

Showing if y=DES(k, x), then /y = DES(/k, /x) [duplicate]

The textbook gives a similar example of proving the below problem: Based on this, how would I go about showing $y={DES(k, x)} => \overline y=DES(\overline k, \overline x)$, within the same format ...
sangaCat's user avatar
2 votes
1 answer
130 views

Proving DES complementation property: y = DES(k,x) ⟹ /y = DES(/k, /x)

Below is my proof for this. I was not sure if this is correct and was also a little confused regarding the complementarity property of DES. Does this property mean there is a serious vulnerability in ...
sangaCat's user avatar
3 votes
1 answer
200 views

Is DES/2DES/3DES still used?

I checked a related question, but I still did not find the answer I was looking for. Specifically, do we have any statistics on the usage of DES/2DES/3DES? It seems from here that credit card systems ...
tigerjack's user avatar
  • 131
0 votes
0 answers
118 views

Finding bit positions of '1' in DES Encryption

In DES encryption, the IP table is shown. If the input given in hexadecimal is "0020 0940 0000 F008", which are the bit positions of "1" after the IP stage ?
Bassel 1000's user avatar
2 votes
2 answers
124 views

Using the MAC to verify if Cipher Only attack has succeeded

I am working on an experiment to compare the efficiency of brute-force attacking block ciphers like AES and DES with reduced key sizes for different programming languages and library implementations. ...
Matt's user avatar
  • 21
0 votes
1 answer
144 views

Initial Permutation in DES

Why is the Initial Permutation Step necessary in DES? How does it strengthen the cipher since we are reversing the permutation in the output?
Rituparna's user avatar
  • 103
0 votes
0 answers
343 views

MDK vs IMK vs MK key differences

I don't understand whether they are different or not. Would you mind explaining them all? MK-AC, MK-SMI, MK-SMC MDK Encryption Key, MDK MAC, MDK AC IMK-AC, IMK-SMI, IMK-SMC For example, in the ...
Soner from The Ottoman Empire's user avatar
0 votes
1 answer
82 views

How is it that the attack in this pdf is deemed feasible, at 2 to the power of 88/89 des calculations?

in the following pdf, several attacks on double key length triple des are deemed feasible at 2 to the power of 88/89 des calculations. if we take the record of cracking des at 2 to the power of 56 ...
Stefan N's user avatar
0 votes
1 answer
111 views

Finding out corrupted S Box value in DES implementation?

I am using DES encryption when writing a file in an embedded device. When I decrypt the file. I get a partially corrupted file. Kind of randomly some 8-byte blocks are corrupted. Some are not. When I ...
Monem Ahmed's user avatar
2 votes
1 answer
1k views

CTF - DES Challenge

I am trying to solve a CTF challenge based on DES. I attached the code of the challenge to the question. So far I have noticed that the otp used for the encryption is the same for the entire session, ...
Shark44's user avatar
  • 145
0 votes
1 answer
81 views

How Does S box introduce diffusion in DES?

According to a Lecture from Lecture notes of a Professor of Purdue University "Diffusion means that a change in any plaintext bit must propagate out to as many ciphertext bits as possible." ...
kzs's user avatar
  • 103
2 votes
0 answers
39 views

How many ciphertexts should attacker intercepts if he only knows the first 3 bytes of plaintext of each one?

Consider a system in which DES is used to encrypt messages in which the first three plaintext Bytes are known by the attacker. How many encrypted messages is it necessary to intercept in order to be ...
Allexj's user avatar
  • 143
1 vote
1 answer
156 views

DES attack with known partial plaintext

Consider a system where DES is used to encrypt HTTP GET requests. The first three bytes correspond to the character sequence "GET". How many encrypted messages is it necessary to intercept ...
Angelo's user avatar
  • 13
1 vote
0 answers
607 views

DES in cipher feedback mode CFB

We use DES in cipher feedback mode (CFB) to encrypt a plaintext $m = m_1\mathbin\|m_2\mathbin\|\ldots\mathbin\|m_{100}$ into a ciphertext $c_1\mathbin\|c_2\mathbin\|\ldots\mathbin\|c_{100}$, where ...
user108810's user avatar
2 votes
2 answers
442 views

Why do we encrypt then decrypt then encrypt data with different keys?

In GlobalPlatform specification for smartcards, I came accross this rather strange scheme* ISO/IEC ISO/IEC 9797-1 MAC Algorithm 3: To calculate the Message Authentication Code, we take some original ...
Ryan B.'s user avatar
  • 153
2 votes
2 answers
78 views

DES initial key generation

I am working through a textbook on crypto, currently on DES section. What bothers me is that there was no explanation about where do we get initial 64-bit key from. This question is also very hard to ...
Michael Hammer's user avatar
0 votes
0 answers
645 views

Cracking 2-Key Triple DES

I've been given that an attacker has a 2-Key Triple DES Cracker that is capable of performing 10$^{24}$ encryptions per second and have subsequently been asked how long it must take before the ...
murpw2011's user avatar
  • 101
-1 votes
1 answer
476 views

How is DES used with CBC?

I'm reading our school's notes for cryptography, and it does a good job explaining CBC and DES in detail, but it fails to provide good information on how they are related. From what I've researched so ...
Green Ideology's user avatar
0 votes
2 answers
65 views

Attack on AES/DES [duplicate]

Can we devise an attack on AES or DES (ECB mode) if we know just the distribution for the plaintext? For example, it is a English plain text -- we know what that would look like and the relative ...
nivedita's user avatar
1 vote
0 answers
70 views

DES next round key

I don't understand which DES key is used in the next round of Feistel construction. As you can see below, we use our original key that has been inserted in permuted choice 1, where we got 56 bits, ...
joxavy's user avatar
  • 11
1 vote
2 answers
883 views

(DES) What is the probability that two keys (k1, k2) produce the same ciphertext given the same plaintext?

Basically, I need to find the probability that DES(p, k1) = DES(p, k2) = c My guess is that probability = 1 / 2^64 since that's the total number of possible outputs, but honestly I have no clue about ...
Ernesto Diaz's user avatar
0 votes
1 answer
60 views

2DES has an identity key - clarification

In this post, there's a discussion on single DES not having a key that yields the identity function. It mentions at the top: That proposition is false for 2DES (EE), even restricted to one key, ...
Anon's user avatar
  • 403
0 votes
0 answers
44 views

Is the following attack on a DES-based commitment scheme valid?

I've encountered the following question while practising for an upcoming exam in Cryptography and would like to know if I'm on the right track: The following is a suggestion for a DES-based ...
Anon's user avatar
  • 403
0 votes
1 answer
95 views

Equivalance of encryption and decryption in DES under bruteforce

I am studying the vulnerability of DES algorithm. Let there be a DES system with 5 keys, 56bits each. Encryption works as follows: (It's in this order on purpose) $C=DEC_{k1}(ENC_{k2}(ENC_{k3}(DEC_{k4}...
nimrod891's user avatar
-1 votes
1 answer
147 views

What is the importance of superencryption?

Please, can any extensively explain the importance of super encryption in relation to attacks experienced by single standard algorithms
Ubochi Chibueze Nwamouh's user avatar
7 votes
3 answers
6k views

What is DES-EDE3-CBC?

I came across DES-EDE3-CBC and a quick search didn't yield a clear explanation of what it is. Clearly, DES is the Data Encryption Standard and CBC is the Cipher Block Chaining mode. EDE is probably ...
Erwin's user avatar
  • 253
3 votes
0 answers
165 views

What are the concrete changes the NSA did to the algorithm before DES was published?

It's common knowledge that the NSA, before publication of DES, tweaked the algorithm to improve its resistance against differential cryptanalysis. Schneier writes some of this on his blog, for example ...
performancematters's user avatar
1 vote
1 answer
139 views

Increasing the parallelization of Triple-DES

Triple-DES encrypts with the first key, then the second key, then the third key. Two keys are sitting around waiting. Why not encrypt with all three keys at the same time? You take 192 bits of ...
Jim's user avatar
  • 11
1 vote
0 answers
316 views

Variant of DES and breaking the 16 round DES

Consider a variant of DES algorithm, called DES-WEAK. In DES-WEAK, there is no permutation P in a round and all the S-boxes are replaced. The new S-boxes are all identical and defined as follows. Let ...
Turing101's user avatar
  • 111
1 vote
0 answers
51 views

How does one produce this in the linear cryptanalysis of DES

I understand how this linear approximation board below is produced, but I can't understand how this second board is produced using the first one and finally how the pilling-up lemma values are ...
whatevahhh's user avatar
2 votes
1 answer
278 views

DES SBOX Output with Bitslice

I am not understanding how to compute the output bits of a 6-to-4-SBOX with bitslice technique in DES. Matthew Kwan made a brief recap in his paper "Reducing the Gate Count of Bitslice DES" ...
ChopaChupChup's user avatar
4 votes
1 answer
532 views

Matsui's linear attack on 5-round DES

I'm trying to understand Mitsuru Matsui's "Linear Cryptanalysis Method for DES Cipher", specifically the attack he describes at the end of section 5, on 5-round DES. I followed the attack on ...
Federico Lebrón's user avatar
0 votes
0 answers
36 views

Evaluation of prediction of probability is a DES structure

Suppose you are given $DES_k(m)$ for some unknown $k$ and $m$, where DES() is the usual DES scheme. With what probability can you predict, for example, the 12-th bit in the output of $DES_{\bar{k}}(\...
Sudhir Kumar Sahoo's user avatar
1 vote
1 answer
1k views

How to solve this S Box?

I have performed the XOR and the result comes as 1001. Now my confusion is that in standard S-Box (DES) the input is 6 bit where the first and last bit together specifies row and 4-middle bits column. ...
Bukaida's user avatar
  • 113
1 vote
1 answer
721 views

Which block cipher modes are best used in real life situations?

For an exam I'm studying for, I'm wondering what block cipher modes are best to use in certain situations. We learned about these block cipher modes: ECB, CBC, CFB (+ s-bit), OFB (+ s-bit) and CTR. ...
Tessa I's user avatar
  • 11
0 votes
1 answer
64 views

Security in a pipeline

I am new to cryptography, I am trying to design a secure pipeline environment for the fast transfer of messages. To reduce the Key size I am planning to encrypt the messages with AES session keys (for ...
Student forlife's user avatar
1 vote
1 answer
439 views

What are those RSA Challenges, DES Challenges and RSA Factoring Challenges

Can someone explain the differences between the DES challenge, the RSA challenges, and the RSA factoring challenge? What were the aims? I think the factoring challenge was to encourage research, the ...
george s's user avatar
-1 votes
1 answer
417 views

How to make DES more secure without switching from des state to another cryptography system and what are limitations of DES?

How to make DES more secure without switching from des state to another cryptography system and what are limitations of DES? Is there any 3 ways to make des more secure?
user avatar
0 votes
1 answer
421 views

Why are des-cbc-hmac and rc4-hmac-exp considered weak in kerberos?

Kerberos uses des-cbc-hmac (mac and encrypt) and rc4-hmac-exp based on md5 (mac and encrypt I think) in their encryptions. Those encryptions are considered as weak and should not be used. Why are they ...
adi's user avatar
  • 175
1 vote
2 answers
1k views

Meet in the middle time complexity

Hello, I am wondering why it is stated that double encrypted message with 2 DES keys is possible to break in worst case in $2\times2^{56}$ time using meet in the middle attack. Here is my reasoning: ...
pajacol's user avatar
  • 15
0 votes
1 answer
416 views

An algorithm to break 2DES with less operations than exhaustive search

Exercise 3.6 from Cryptography and Engineering Consider a new block cipher, DES2, that consists only of two rounds of the DES block cipher. DES2 has the same block and key size as DES. For this ...
killertoge's user avatar
0 votes
1 answer
97 views

What are the minimum mathematics and computer science subjects that I need to understand DES and AES?

I want to study the DES and AES algorithms The question: What are the minimum mathematics and computer science subjects that I need to understand DES and AES? Edit: I mean how they work internally.
Crypt01's user avatar
  • 417
0 votes
0 answers
122 views

How Differential Cryptanalysis of DES work?

I have been studying the DC of DES. As a beginner, I completed the general structure of DES and began DC. I understand the idea of attack, how to find different characteristics for differential ...
Ekin's user avatar
  • 1
1 vote
1 answer
176 views

PRNG For RSA (ANSI_X9.31)

I have a query please , I want to know how to generate random numbers using ANSI_X9.31 algorithm for RSA Algorithm please . Thank u
Mohamed Amine's user avatar
0 votes
3 answers
3k views

How to generate keys from a 56 bit using DES

First I just want to apologize for my lack of knowledge in this system. The professor kind of gave us an exercise to solve before even going through the lessons. I tired to look at videos online but ...
Hakim Cheheb's user avatar
1 vote
0 answers
135 views

Formal security arguments for 3 round feistal network using PRF

There is a proof sketch in Introduction to modern cryptography that a three-round feistel network using pseudorandom round functions is a secure pseudorandom permutation PRP Πk against probabilistic ...
Chulbuli's user avatar
1 vote
1 answer
779 views

Why is this DES key considered weak?

I understand the premise of weak keys in DES and cryptography. From searching online, I understand that keys that are comprised of all zeroes / all ones / alternating ones and zeroes / alternating ...
Jame's user avatar
  • 19
4 votes
2 answers
989 views

Why is a Feistel Network invertible?

As it is depicted above, the Feistel Network uses random function fi which is not required to be invertible. However, if fi is not invertible, how can fi(Li) == fi(Ri-1)? Furthermore, why Feistel ...
Xinyu Tu's user avatar
1 vote
0 answers
450 views

Vulnerability in DES3 when key can be chosen

In the question there are two functions encrypt basically does IV ⨁ DES3(P⨁IV) and encrypt_flag just encrypts the flag after being padded into a multiple of 8. IV is a random 8 byte number which is ...
Michael Blane's user avatar
0 votes
0 answers
39 views

Reason for DES's inital permutation? [duplicate]

I'm learning DES, but I have a question. When the plain text input, it gets a permutation by a table. But, I don't know why 01 -> 58 / 02 -> 50. Is there any special rule or principle of it? or ...
AABAA's user avatar
  • 1

1
2 3 4 5
9