Questions tagged [des]

(or Data Encryption Standard), a (symmetric) block cipher using a 64 bit block size, with keys of size 56 bit, the standard US block cipher from 1976 to 2001.

Filter by
Sorted by
Tagged with
-1
votes
0answers
28 views

permutation,how that more than 60% of possible mappings will have at least one fixed point [closed]

Let $\pi(.)$ be a permutation over the integers $\{0,1,2,…,(2^𝑛 βˆ’ 1)\}$. Fixing the key, DES is such a permutation for $n=64$. We say $\pi$ has a fixed point if $\pi(π‘š) = π‘š$ for some $m$. As you ...
2
votes
1answer
831 views

About the Algebraic Normal Form (ANF) of S-Box in DES

I've thought up a way to represent the transformation of S-Box in DES by ANF. Let $x_i\;(1\le i\le 6)$ be the input of an S-Box, $y_i\;(1\le i\le 4)$ be the output, for example, then $$y_1= 1\oplus ...
0
votes
1answer
524 views

S-Box and it's linearity

I am trying to figure out why it is necessary S-box's to be nonlinear. I have been searching for some materials but was not able to find out clear proof why it means that if we use S-box in DES, it ...
0
votes
1answer
31 views

Differential-linear attack on DES

Is there any known differential-linear attack on full round DES? I couldn't found any and couldn't work on this due to time restriction.
0
votes
0answers
28 views

2Key 3DES bit security [closed]

"On the security of 2-key triple DES by Chris J Mitchell" , The Abstract section, mentioned "2-key triple DES provides 80 bits security", I can't comprehend from where he reached ...
3
votes
1answer
2k views

Is DES secure under CBC?

I know DES is outdated, but will is is secure in CBC mode? Can anyone help me understand why not?
3
votes
1answer
300 views

Can we use Bitcoin miner to break 2Key 3DES, if yes how long it takes?

As ASICs are specifically designed to generate the hash for a block of a block chain. which is much faster than other GPUs which are used to break 2key-3DES. can we use Array of ASICs to break 2key-...
0
votes
0answers
27 views

Avalanche effect SBOX

It is possible to achieve the avalanche effect in an SPN or in a Feistel network that use a single round of an SPN in his function (like DES) using SBOX that receive 2 bit in input and output 2 bit?
1
vote
1answer
85 views

Help with linear approximation of DES(I don't understand some part of it )

I will make a presentation about Linear approximation (Matsui's paper 1993 Linear Cryptanalysis Method for DES Cipher ) of DES and I don't understand some parts of it. Here my questions : In the ...
1
vote
1answer
95 views

DES security if used a SHA3 function instead of Normal DES function?

I was practicing some python programming and I decided to implement a simple DES encryption function, so i decided to take some shortcuts so instead of DES expansion boxes and s-Boxes i just used a ...
2
votes
1answer
35 views

MAC forgery using the DES's Complementary Property

I've started reading on MACs and working on a problem where given a MAC construction as $H_0=IV$ and for every $i>0$ $H_i=H_{iβˆ’1} \oplus E_{M[i]}(H_{iβˆ’1})$ and the tag is $(IV,E_{k_1}(H_β„“))$, I ...
0
votes
0answers
39 views

Matsui's Linear Attack algorithms

I'm trying to understand Matsui's linear attack on DES and I don't understand something in the paper. I can't understand how the algorithms 1 & 2 work.
4
votes
1answer
346 views

DES - Weakness in Sbox

In the book "Introduction to Cryptography with Coding Theory ", in the chapter about the Differential Cryptanalysis for Four Rounds for DES algorithm, the authors say: There is a weakness in the ...
2
votes
1answer
269 views

Two Round Feistel network

While reading on block ciphers and DES I read that two-round Feistel network is not a secure PRP? Is there any easy to understand proof to explain the intuition behind this statement. I did search ...
1
vote
2answers
811 views

Converting normal alphabets to 64 bit plain text

How can I convert a normal alphabetical text (say hi) to a 64 bit or 128 bit binary digit input for DES?
1
vote
1answer
52 views

Is it possible to use an S-box similar to the one used in DES in AES? How would this work?

I'm reviewing some questions given to me by a professor and am stumped on this one. My initial guess is that yes, this is possible, but I do not know how to explain it, specifically for a function $\{...
16
votes
1answer
4k views

Duration for attacking Two-Key Triple-DES Encryption using all RAM ever built?

I am considering attacks on Two-Key Triple-DES Encryption assuming $2^{32}$ known plaintext/ciphertext pairs (that's a mere 32GiB of ciphertext) by the method devised by Paul C. van Oorschot and ...
3
votes
0answers
108 views

Is there any real attack deployed on the CTR mode over history?

The CTR mode, with its CPA security, is one of the malleable block cipher mode of operations. An attacker can simply modify the bits of the ciphertext stream in their advance. This is due to the lack ...
8
votes
1answer
181 views

Proof that no DES key makes encryption identity

How can we prove that no DES key makes encryption the identity function? That is: $\;\forall K\in\{0,1\}^{56}\quad\exists M\in\{0,1\}^{64}\quad E_K(M)\ne M$ Note: anyone disproving this proposition ...
0
votes
0answers
58 views

Triple encryption with three separate keys, cascading vs. interweaving

When performing triple encryption using three separate keys, how have cascading vs. interweaving stacked up against each other in cryptoanalysis? Most of the references to triple encryption I see seem ...
1
vote
1answer
78 views

Disrupting MITM attack against 3DES by intermingling plaintext and inter-mediate ciphertext between rounds

Let's say someone implements 3DES with three separate 56-bit keys and an attacker is attempting to execute a MITM attack. Here is the encryption plan designed to attempt to disrupt the MITM attack, or ...
15
votes
1answer
5k views

Why is double encryption that's equivalent to single encryption no better than single encryption?

In the "Introduction to Cryptography: With Coding Theory" by Trappe and Washington, in the chapter about DES algorithm the authors say that: "if a cryptosystem is such that double encryption is ...
0
votes
1answer
266 views

Time taken for Brute Force Attack on DES

An attacker is equipped with a computer that performs 10 trillion (1013) DES decryptions per second, what is the average time required, in hours, for a brute force attacker to break DES? Key size is ...
2
votes
2answers
407 views

DES : Is Double Encryption using same key twice equivalent to single DES using different key but of same size

If we encrypt a plain text using Double DES but with same key K1, Can we get the same result as if we would encrypt the plain text using single DES but with different key, say K2. What I'm asking is ...
2
votes
0answers
68 views

differential cryptanalysis on the second round of 4-variant DES

I am using differential cryptanalysis to attack the second key of a 4-variant DES and I am using Shamir and biham book as a reference . they say that we should choose two input Xor P3 and P4 that ...
-1
votes
1answer
64 views

How to find Key with DES, ECB hash and plaintext [closed]

I have two ciphertexts. Encryption algorithm: DES in ECB mode. Ciphertext: 72EE3532F904CE2AAA966C723C463F294CA8AB1C11E9E0B304BBB6A8E2BD1F34 Plaintext: DetectedSpambotsRemailedMalwares Ciphertext: ...
0
votes
1answer
133 views

How to figure out DES mode used given plaintext and ciphertext?

In DES, I'm given the following exercise. - How can I find out which part of the plaintext each ciphertext message corresponds to, and which mode they were each encrypted with?
0
votes
1answer
113 views

How to calculate size of a codebook lookup table to break block cipher?

I was reading a book called Serious Cryptography. There is a page saying that block size must be large enough to prevent codebook attacks: When 16-bit blocks are used, the lookup table needs only 2^...
1
vote
1answer
185 views

Frequency Analysis on DES, AES, 3DES using Cryptool2

I am trying to analyze symmetric block ciphers like DES, 3DES and AES, using Cryptool 2. I want to do a frequency analysis on each of these ciphers, in order to comment whether this is an effective ...
2
votes
1answer
117 views

ISO 9797 MAC algorithm 3 for 7 bytes

I should implement ISO 9797 MAC algorithm 3 with initial transformation 1, without truncation, and using DES as a block cipher. I should add padding of 0x80, then ...
0
votes
0answers
64 views

“16-bit DES encryption algorithm”

I need to use encryption software from PSpice for my SPICE model. In a user guide on page 71 they claim to use a "16-bit DES encryption algorithm". According to the wiki DES is using a 64-...
2
votes
1answer
113 views

Quadruple DES vs AES-128 security

I came across this question regarding the security of Quadruple DES (hypothetically DES done four times) in CBC encryption mode vs security of AES-128 in CBC encryption mode. What parameters help to ...
1
vote
1answer
123 views

Would Triple DES-X with 7 keys be much slower than standard Triple DES?

Since a single hardware pass of an XOR with a 64 bit key is very fast, would Triple DES-X using seven 64 bit keys used in the following manner be virtually identical in terms of code size, memory ...
2
votes
0answers
54 views

DES decryption of the homomorphic encryption ciphertext

I implemented an application using partial homomorphic encryption for outsourced computations. To get an efficient bandwidth, I am thinking to apply (DES) symmetric algorithm to encrypt the message ...
1
vote
1answer
126 views

Attack against $\operatorname{DESA}_{k,k_1} (x) \underset{\text{def}}= \operatorname{DES}_k(x)βŠ•k_1$

Problem 5.16 in this pdf, from the book: Christof Paar, Jan Pelzl, Understanding Cryptography 5.16. This is your chance to break a cryptosystem. As we know by now, cryptography is a tricky business. ...
8
votes
3answers
314 views

DES f function injective for no fixed subkey?

Let $f$ be the function used in a round of DES, as defined in FIPS 46-3: $$\begin{align} f:\{0,1\}^{32}\times\{0,1\}^{48}&\to\ \{0,1\}^{32}\\ (R,K)\ &\mapsto f(R,K)\underset{\mathsf{def}}=...
1
vote
0answers
71 views

Prove how to brute-force the double encryption with complexity 2^57 rather than 2^112?

We know that DES has key length that is too short to defend brute-force attack. One idea to improve DES was to encrypt a message using DES twice with two different keys. Let E be the encryption ...
0
votes
2answers
957 views

If the first key-bit is flipped, which DES s-boxes are affected?

Instead of the input bit being flipped... if the 1st bit of the key is being flipped, which s-boxes are affected during encryption/decryption of DES?
1
vote
1answer
98 views

DES F function never injective?

Now i know that the F function doesn't have to be injective, but is it NEVER injective? or is it possible to have an injective F function?
29
votes
1answer
7k views

How was the special DES key 0E329232EA6D0D73 found?

The DES key 0E329232EA6D0D73 has the unusual property that decrypting a ciphertext block consisting entirely of zeros gives a plaintext block consisting of eight repetitions of the same byte (0x87). ...
0
votes
0answers
31 views

How to determine the maximum number of times the DES algorithm needs to be run?

I am only a beginner in cryptography and I am getting confused by the following: Question Consider a known-plaintext attack performed on a double-DES cryptosystem. (a) Determine the maximum number ...
0
votes
0answers
19 views

Design flaws in the round-key generation mechanism of Data Encryption Standard (DES) [duplicate]

I am beginner in Cryptography, I want to ask that what are two design flaws in the round-key generation mechanism of Data Encryption Standard (DES) that can lead to the occurrence of weak and semi-...
0
votes
1answer
79 views

Proof of probability of weak keys in block cipher

My textbook has the following theorem: Given a block cipher with a key length of K bits and blocksize of n bits as well as t plaintext-ciphertext pairs, the expected number of false keys which ...
0
votes
1answer
79 views

DES-CBC with random IV - how big is the keyspace? Can COTS tools crack it?

I've spent the night reversing the implementation of the 'Basic Text Encryptor' from Jasypt [1]. The algorithm is defined in documentation as 'PBEWithMD5AndDES'. The implementation is this: A ...
0
votes
0answers
55 views

DES Meet in the Middle

My professor showed us the basics of DES, and then displayed this slide where the Meet in the Middle attack can be used as a way of cracking DES. I believe at this stage we are doing 2DES, as opposed ...
0
votes
0answers
42 views

DES complement trick [duplicate]

My professor showed us the basics of DES, and then displayed this slide where the Complement Trick can be used as a way of cracking DES. Could someone explain the math to me please?
1
vote
1answer
101 views

Why isn't data encrypted with mutiple ciphers?

Why isn't data encrypted with multiple uncompromised (so far) ciphers? Feel free to answer for a single private key for both and separate private keys. For example, encrypting data with TwoFish and ...
1
vote
0answers
31 views

How do additional input output pairs help with a Meet in the Middle attack on Double DES

Double DES is vulnerable to a Meet in the Middle attack where an attacker generates intermediate values and then matches them up to find candidate key pairs. For Double DES using $56$ bit keys and $1$ ...
0
votes
2answers
312 views

How do AES and DES ensure data integrity?

I have been trying to study for cryptographic symmetric algorithms (AES,DES) and came up with a question whether these two on their own ensure integrity (i.e data has not been altered). Do these two ...
39
votes
2answers
19k views

Why do we use encrypt-decrypt-encrypt (EDE) in 3DES, rather than encrypting three times?

I'm wondering why we use encrypt-decrypt-encrypt (EDE) sequence in 3DES (also known as DES-EDE, TDES or TDEA) with three keys instead of three times encryption (EEE) with three different keys?

1
2 3 4 5
…
8