Questions tagged [des]
(or Data Encryption Standard), a (symmetric) block cipher using a 64 bit block size, with keys of size 56 bit, the standard US block cipher from 1976 to 2001.
416
questions
0
votes
1
answer
46
views
Initial Permutation in DES
Why is the Initial Permutation Step necessary in DES? How does it strengthen the cipher since we are reversing the permutation in the output?
- 103
0
votes
0
answers
31
views
MDK vs IMK vs MK key differences
I don't understand whether they are different or not. Would you mind explaining them all?
MK-AC, MK-SMI, MK-SMC
MDK Encryption Key, MDK MAC, MDK AC
IMK-AC, IMK-SMI, IMK-SMC
For example, in the ...
0
votes
1
answer
53
views
How is it that the attack in this pdf is deemed feasible, at 2 to the power of 88/89 des calculations?
in the following pdf, several attacks on double key length triple des are deemed feasible at 2 to the power of 88/89 des calculations.
if we take the record of cracking des at 2 to the power of 56 ...
- 1
0
votes
1
answer
58
views
Finding out corrupted S Box value in DES implementation?
I am using DES encryption when writing a file in an embedded device. When I decrypt the file. I get a partially corrupted file. Kind of randomly some 8-byte blocks are corrupted. Some are not. When I ...
2
votes
1
answer
172
views
CTF - DES Challenge
I am trying to solve a CTF challenge based on DES. I attached the code of the challenge to the question. So far I have noticed that the otp used for the encryption is the same for the entire session, ...
- 137
0
votes
1
answer
49
views
How Does S box introduce diffusion in DES?
According to a Lecture from Lecture notes of a Professor of Purdue University "Diffusion means that a change in any plaintext bit must propagate out to as many ciphertext bits as possible." ...
- 103
0
votes
0
answers
33
views
DES encryption Key from a passphrase
I have been given a DES encryption assignment. I was given the Cipher text, the Plain text and the "passphrase". The passphrase consist of a 4 byte hex string. I have studied several ...
- 1
2
votes
0
answers
35
views
How many ciphertexts should attacker intercepts if he only knows the first 3 bytes of plaintext of each one?
Consider a system in which DES is used to encrypt messages in which the first three plaintext Bytes are known by the attacker. How many encrypted messages is it necessary to intercept in order to be ...
- 143
1
vote
1
answer
87
views
DES attack with known partial plaintext
Consider a system where DES is used to encrypt HTTP GET requests. The first three bytes correspond to the character sequence "GET". How many encrypted messages is it necessary to intercept ...
- 13
1
vote
0
answers
245
views
DES in cipher feedback mode CFB
We use DES in cipher feedback mode (CFB) to encrypt a plaintext $m = m_1\mathbin\|m_2\mathbin\|\ldots\mathbin\|m_{100}$ into a ciphertext $c_1\mathbin\|c_2\mathbin\|\ldots\mathbin\|c_{100}$, where ...
- 11
2
votes
2
answers
253
views
Why do we encrypt then decrypt then encrypt data with different keys?
In GlobalPlatform specification for smartcards, I came accross this rather strange scheme* ISO/IEC ISO/IEC 9797-1 MAC Algorithm 3:
To calculate the Message Authentication Code, we take some original ...
- 153
2
votes
2
answers
62
views
DES initial key generation
I am working through a textbook on crypto, currently on DES section. What bothers me is that there was no explanation about where do we get initial 64-bit key from. This question is also very hard to ...
0
votes
0
answers
237
views
Cracking 2-Key Triple DES
I've been given that an attacker has a 2-Key Triple DES Cracker that is capable of performing 10$^{24}$ encryptions per second and have subsequently been asked how long it must take before the ...
- 101
-1
votes
1
answer
70
views
How is DES used with CBC?
I'm reading our school's notes for cryptography, and it does a good job explaining CBC and DES in detail, but it fails to provide good information on how they are related.
From what I've researched so ...
0
votes
2
answers
48
views
Attack on AES/DES [duplicate]
Can we devise an attack on AES or DES (ECB mode) if we know just the distribution for the plaintext? For example, it is a English plain text -- we know what that would look like and the relative ...
- 31
1
vote
0
answers
55
views
DES next round key
I don't understand which DES key is used in the next round of Feistel construction.
As you can see below, we use our original key that has been inserted in permuted choice 1, where we got 56 bits, ...
- 11
1
vote
2
answers
745
views
(DES) What is the probability that two keys (k1, k2) produce the same ciphertext given the same plaintext?
Basically, I need to find the probability that DES(p, k1) = DES(p, k2) = c
My guess is that probability = 1 / 2^64 since that's the total number of possible outputs, but honestly I have no clue about ...
- 11
0
votes
1
answer
44
views
2DES has an identity key - clarification
In this post, there's a discussion on single DES not having a key that yields the identity function. It mentions at the top:
That proposition is false for 2DES (EE), even restricted to one key, ...
- 383
0
votes
0
answers
40
views
Is the following attack on a DES-based commitment scheme valid?
I've encountered the following question while practising for an upcoming exam in Cryptography and would like to know if I'm on the right track:
The following is a suggestion for a DES-based ...
- 383
0
votes
1
answer
81
views
Equivalance of encryption and decryption in DES under bruteforce
I am studying the vulnerability of DES algorithm.
Let there be a DES system with 5 keys, 56bits each. Encryption works as follows: (It's in this order on purpose)
$C=DEC_{k1}(ENC_{k2}(ENC_{k3}(DEC_{k4}...
-1
votes
1
answer
132
views
What is the importance of superencryption?
Please, can any extensively explain the importance of super encryption in relation to attacks experienced by single standard algorithms
7
votes
3
answers
4k
views
What is DES-EDE3-CBC?
I came across DES-EDE3-CBC and a quick search didn't yield a clear explanation of what it is.
Clearly, DES is the Data Encryption Standard and CBC is the Cipher Block Chaining mode.
EDE is probably ...
- 253
3
votes
0
answers
134
views
What are the concrete changes the NSA did to the algorithm before DES was published?
It's common knowledge that the NSA, before publication of DES, tweaked the algorithm to improve its resistance against differential cryptanalysis. Schneier writes some of this on his blog, for example ...
1
vote
1
answer
123
views
Increasing the parallelization of Triple-DES
Triple-DES encrypts with the first key, then the second key, then the third key. Two keys are sitting around waiting. Why not encrypt with all three keys at the same time?
You take 192 bits of ...
- 11
1
vote
0
answers
246
views
Variant of DES and breaking the 16 round DES
Consider a variant of DES algorithm, called DES-WEAK. In DES-WEAK,
there is no permutation P in a round and all the S-boxes are replaced. The new S-boxes are all
identical and defined as follows. Let ...
- 111
1
vote
0
answers
47
views
How does one produce this in the linear cryptanalysis of DES
I understand how this linear approximation board below is produced,
but I can't understand how this second board is produced using the first one
and finally how the pilling-up lemma values are ...
- 11
2
votes
1
answer
212
views
DES SBOX Output with Bitslice
I am not understanding how to compute the output bits of a 6-to-4-SBOX with bitslice technique in DES.
Matthew Kwan made a brief recap in his paper "Reducing the Gate Count of Bitslice DES" ...
4
votes
1
answer
345
views
Matsui's linear attack on 5-round DES
I'm trying to understand Mitsuru Matsui's "Linear Cryptanalysis Method for DES Cipher", specifically the attack he describes at the end of section 5, on 5-round DES. I followed the attack on ...
- 171
0
votes
0
answers
36
views
Evaluation of prediction of probability is a DES structure
Suppose you are given $DES_k(m)$ for some unknown $k$ and $m$, where DES() is the usual DES scheme. With what probability can you predict, for example, the 12-th bit in the output of $DES_{\bar{k}}(\...
1
vote
1
answer
705
views
How to solve this S Box?
I have performed the XOR and the result comes as 1001.
Now my confusion is that in standard S-Box (DES) the input is 6 bit where the first and last bit together specifies row and 4-middle bits column. ...
- 113
1
vote
1
answer
299
views
Which block cipher modes are best used in real life situations?
For an exam I'm studying for, I'm wondering what block cipher modes are best to use in certain situations.
We learned about these block cipher modes: ECB, CBC, CFB (+ s-bit), OFB (+ s-bit) and CTR.
...
- 11
0
votes
1
answer
61
views
Security in a pipeline
I am new to cryptography, I am trying to design a secure pipeline environment for the fast transfer of messages. To reduce the Key size I am planning to encrypt the messages with AES session keys (for ...
1
vote
1
answer
315
views
What are those RSA Challenges, DES Challenges and RSA Factoring Challenges
Can someone explain the differences between the DES challenge, the RSA challenges, and the RSA factoring challenge? What were the aims?
I think the factoring challenge was to encourage research, the ...
- 11
-1
votes
1
answer
329
views
How to make DES more secure without switching from des state to another cryptography system and what are limitations of DES?
How to make DES more secure without switching from des state to another cryptography system and what are limitations of DES?
Is there any 3 ways to make des more secure?
user97033
0
votes
1
answer
308
views
Why are des-cbc-hmac and rc4-hmac-exp considered weak in kerberos?
Kerberos uses des-cbc-hmac (mac and encrypt) and rc4-hmac-exp based on md5 (mac and encrypt I think) in their encryptions.
Those encryptions are considered as weak and should not be used. Why are they ...
- 175
1
vote
2
answers
769
views
Meet in the middle time complexity
Hello,
I am wondering why it is stated that double encrypted message with 2 DES keys is possible to break in worst case in $2\times2^{56}$ time using meet in the middle attack.
Here is my reasoning:
...
- 15
0
votes
1
answer
301
views
An algorithm to break 2DES with less operations than exhaustive search
Exercise 3.6 from Cryptography and Engineering Consider a new block cipher, DES2, that consists only of
two rounds of the DES block cipher. DES2 has the same block and key
size as DES. For this ...
- 299
0
votes
1
answer
96
views
What are the minimum mathematics and computer science subjects that I need to understand DES and AES?
I want to study the DES and AES algorithms
The question:
What are the minimum mathematics and computer science subjects that I need to understand DES and AES?
Edit: I mean how they work internally.
- 407
0
votes
0
answers
90
views
How Differential Cryptanalysis of DES work?
I have been studying the DC of DES. As a beginner, I completed the general structure of DES and began DC. I understand the idea of attack, how to find different characteristics for differential ...
- 1
1
vote
1
answer
146
views
PRNG For RSA (ANSI_X9.31)
I have a query please , I want to know how to generate random numbers using ANSI_X9.31 algorithm for RSA Algorithm please .
Thank u
0
votes
3
answers
2k
views
How to generate keys from a 56 bit using DES
First I just want to apologize for my lack of knowledge in this system.
The professor kind of gave us an exercise to solve before even going through the lessons. I tired to look at videos online but ...
1
vote
0
answers
116
views
Formal security arguments for 3 round feistal network using PRF
There is a proof sketch in Introduction to modern cryptography that a three-round feistel network using pseudorandom round functions is a secure pseudorandom permutation PRP Πk against probabilistic ...
- 11
1
vote
1
answer
540
views
Why is this DES key considered weak?
I understand the premise of weak keys in DES and cryptography. From searching online, I understand that keys that are comprised of all zeroes / all ones / alternating ones and zeroes / alternating ...
- 19
4
votes
2
answers
657
views
Why is a Feistel Network invertible?
As it is depicted above, the Feistel Network uses random function fi which is not required to be invertible. However, if fi is not invertible, how can fi(Li) == fi(Ri-1)? Furthermore, why Feistel ...
- 61
1
vote
0
answers
215
views
Vulnerability in DES3 when key can be chosen
In the question there are two functions encrypt basically does IV ⨁ DES3(P⨁IV) and encrypt_flag just encrypts the flag after being padded into a multiple of 8. IV is a random 8 byte number which is ...
- 201
0
votes
0
answers
38
views
Reason for DES's inital permutation? [duplicate]
I'm learning DES, but I have a question.
When the plain text input, it gets a permutation by a table.
But, I don't know why 01 -> 58 / 02 -> 50. Is there any special rule or principle of it? or ...
- 1
0
votes
0
answers
221
views
0
votes
2
answers
344
views
DES Encryption: Looking for results for each round of encryption/decryption to debug code
I've been searching for a few days in different forums trying to find an example of DES that gives the key/output values for all 16 layers. I found one that gives the encryption which helped me fix ...
0
votes
1
answer
182
views
Problems with Matsui's Linear Cryptanalysis on round reduced DES
I'm trying to understand the known plaintext attack that is briefly explained in the paper Linear Cryptanalysis Method for DES Cipher by Mitsuru Matsui. I've almost understood it (since I'm ...
- 3
1
vote
0
answers
399
views
OpenSSL DES encryption for KCV calculation
I'm trying to implement a simple command-line tool to calculate the (Key Check Value) KCV of some encryption keys. The algorithm for the KCV is simply to encrypt a block of 8 zeros with DES and get ...
