# Questions tagged [des]

(or Data Encryption Standard), a (symmetric) block cipher using a 64 bit block size, with keys of size 56 bit, the standard US block cipher from 1976 to 2001.

324 questions
Filter by
Sorted by
Tagged with
107 views

### Why didn't people redesign the key scheduling algorithm of DES to use longer keys instead of using 3-DES?

To overcome short key length of DES, Triple DES was devised. What would go wrong or why didn't people redesign the key scheduling algorithm to use longer keys?
24 views

### Differential cryptanalysis for DES reduced to Four Rounds and about S/N

I'm reading the paper "Differential Cryptanalysis of the Data Encryption Standard(2009)" and I was stuck in a certain part while reading it. In chapter 4, they explained about differential ...
98 views

### 2Des is double secure of DES?

I read this question in my book (that doesn't have a response). 2DES is doubly more secure than DES? I know that 2DES can be attacked from meet in the middle ...
81 views

### Double 3DES/TDES Encryption

If 3DES/TDES (officially TDEA or Triple DEA - Triple Data Encryption Algorithm) encryption is used twice, using 6 different keys K1-...
36 views

### what if the S-boxes in DES were “optimal”

if we assume that the s-boxes in DES were optimal. that is for each s-box, every cell in the DDT equals to 4. is there a differential characteristic in a good probability?
604 views

### Does the Initialization Vector in DES have to be 8 bytes long?

I was experimenting around with DES and decided to implement an IV (Initialization Vector) for it. I noticed that in DES, which is 56 bits and 8 parity bits, the IV would be 8 bytes in length. Does ...
32 views

### DES/CBC : incorrect first 8 bytes [duplicate]

Question about DES-CBC : how to know IV if I have key, input buffer (plaintext), output buffer (encrypted) and decrypted result where first 8 bytes are incorrect but all other bytes are correct ?"
56 views

### What to pad DES key with? [closed]

As a bit of practice, I'm reinventing the wheel by implementing DES in python. Before I even got beyond the first function, I came across a problem... With key <...
71 views

53 views

### Meet-in-the-middle attack (different block cipher modes)

Does a meet-in-the-middle attack on depend on the used modes for block ciphers? encryption: $C_i$ = $D_{K2}$($D_{K1}$($E_{K1}$($P_i$ $\oplus$ $C''_{i-1}$))) $\oplus$ $C'_{i-1}$ and $IV_1$ = $C''_0$ = ...
173 views

### DES - Weakness in Sbox

In the book "Introduction to Cryptography with Coding Theory ", in the chapter about the Differential Cryptanalysis for Four Rounds for DES algorithm, the authors say: There is a weakness in the ...
72 views

### Why is DES secure against differential cryptanalysis

I was wondering, why DES is secure against Differential Attacks. Some of the S-Boxes have a very bad Differential Uniformity, only one has a DU of 4, 3 have a DU of 6 and the others are much worse. ...
31 views

### Meet-in-the-middle attack (on custom encryption scheme) [duplicate]

This is a question I had from an exercise session. Exercise: First we do DES in CBC encryption mode using a key $K_1$ and $IV_1 = O^n$. Then we do DES in ECB decryption mode using $K_1$. And then DES ...
60 views

### Symmetric encryption construction (meet-in-the-middle attack)

This is a question I had from an exercise session. First we do DES in CBC encryption mode using a key $K_1$ and $IV_1 = O^n$. Then we do DES in ECB decryption mode using $K_1$. And then DES in CBC ...
186 views

### DES parity bits

The key is nominally stored or transmitted as 8 bytes, each with odd parity. According to ANSI X3.92-1981 (Now, known as ANSI INCITS 92-1981), section 3.5: One bit in each 8-bit byte of ...
57 views

### Can $AES_{k1}(m)$ be equal to $AES_{k2}(m)$? [duplicate]

Context: We have a generic bloc cipher composed of an encryption function $E_k$ and a decryption function $D_k$ operating on blocs of $n$ bits. For a key $k$ fixed, we can see $E_k$ as a pseudo-...
179 views

### What are the separate single DES keys from a triple DES key?

Suppose my 192 bit triple DES key (in hex) is 0123456789ABCDEFFEDCBA987654321089ABCDEF01234567 What are the keys for the separate single DES operations? In this ...
58 views

### good OmegaP for characteristic to use in differential cryptanalysis on DES

how to choose a good OmegaP(input difference) for the characteristic used in differential crypt-analysis on DES?
144 views

### Is there any encryption algorithm that, with small change in input will produce big change in the encrypted output?

As stated in the title, I'm looking for an encryption algorithm with the characteristics that, when inputs are slightly different, the encrypted output will be VERY much different, to the point that ...
51 views

### differential cryptanalysis on the second round of 4-variant DES

I am using differential cryptanalysis to attack the second key of a 4-variant DES and I am using Shamir and biham book as a reference . they say that we should choose two input Xor P3 and P4 that ...
81 views

### Security of a block cipher if double encryption $E_{K_2} \circ E_{K_1}$ is always single encryption $E_{f(K_1,K_2)}$

If there always existed a $k_3$ such that $\operatorname{DES}(k_2, \operatorname{DES}(k_1, M)) = \operatorname{DES}(k_3, M)$, how would that affect the security of $\operatorname{DES}$?
93 views

### Getting the s-box input from its output in differential cryptanalysis on DES

If we try to get K4 using differential cryptanalysis on 4-variant DES, how can we get the input of a certain S-box if we know it's output? This seems hard to do since the substitution operation is ...
48 views

### Determine the original input to the S-Boxes

The 8 S-boxes of DES were designed to provide resistance against attacks. Small modifications to an S-box can significantly weaken DES. Can the original input (the result of XOR on the expansion ...
82 views

### Is it possible for an attacker to determine the original input to the S-Boxes in DES?

I am learning about DES, a Feistel 64-bit block cipher with 16 rounds. Is it possible that an intruder can determine the original input to the S-Boxes?
37 views

### triple-des simple questtion [duplicate]

Why do we use encrypt-decrypt-encrypt (EDE) in 3DES, rather than encrypting three times? in this link, we use EDE Mode usually. when we use one key, in this case, Encryption -> Decryption result ...
532 views

### Would DES be secure with 128 bit keys?

Assuming you only modify the key schedule so that each of a 128-bit key is used at least once, would DES be about as secure as other ciphers such as AES? I am not talking about 2DES/3DES or other ...
2k views

### Can neural cryptanalysis be applied to AES?

In this Wikipedia article about Neural cryptography (section applications) it states: In 1995, Sebastien Dourlens applied neural networks to cryptanalyze DES by allowing the networks to learn how ...
175 views

### DES/AES invertibility

My professor has posted a couple of practice questions that so far I haven't been able to find the answer for and I was hoping you could help. DES would remain invertible—it would still be ...
58 views

Trying to write a C program that implements the DES standard (FIPS 46-3). I am unsure about how the standard should be interpreted when computing the various permutations specified in the document, ...
184 views

### Parity checking on DES key if using ASCII chars

This is my first question here, so if I ask it to the wrong group or otherwise infringing the (written or unwritten) rules of the community, please bear with me. My problem is this: In an exercise in ...
46 views

### Is uneven DES keybit use exploitable?

Question: Is there any cryptanalytic leverage to be had from the fact that some of the 56 "raw" keybits of DES are used more & less often than others? Observation: over the course of the 16 ...
218 views

### Would XDES be more secure than 3DES, where X is a number > 3?

Would XDES be more secure than 3DES, where X is a number > 3? Like 10DES... If so why aren't we using it?
I can't find out how to break 1 round of feistel network (obtaining the key). I understand why this equation takes place: $R_1 \oplus L_0 = f(R_0, k_1)$ EDIT: The function f looks like this: But ...