Skip to main content

Questions tagged [des]

(or Data Encryption Standard), a (symmetric) block cipher using a 64 bit block size, with keys of size 56 bit, the standard US block cipher from 1976 to 2001.

52 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
6 votes
2 answers
537 views

DES and AES cryptography

I have a question that I can't answer: A plain text has been encrypted 3 times in a DES method with 3 different keys 56 bit each, after it the text was encrypted for the forth time using a AES ...
Aon Goldfinger's user avatar
4 votes
0 answers
175 views

How many reversible gates would DES require?

How many reversible gates (said counting Toffoli and Controlled NOT, with free NOT) would be required to reversibly implement $(K,P)\mapsto(G,C)$ for the block cipher DES? $P$ is the plaintext, $C$ ...
fgrieu's user avatar
  • 142k
3 votes
0 answers
164 views

What are the concrete changes the NSA did to the algorithm before DES was published?

It's common knowledge that the NSA, before publication of DES, tweaked the algorithm to improve its resistance against differential cryptanalysis. Schneier writes some of this on his blog, for example ...
performancematters's user avatar
3 votes
0 answers
267 views

Is there any real attack deployed on the CTR mode over history?

The CTR mode, with its CPA security, is one of the malleable block cipher mode of operations. An attacker can simply modify the bits of the ciphertext stream in their advance. This is due to the lack ...
kelalaka's user avatar
  • 49k
3 votes
0 answers
174 views

Bitslice DES decryption

I would like to implement fast DES decryption using Bitslice technique. Without bitslice DES technique, I have already done decrpytion in this source code by changing the for loop from 15 to 0. In ...
wagese8155's user avatar
3 votes
0 answers
209 views

Effect of longer key on DES security

I am reading a book on cryptography and the author states that one of the complaints of the research community was that DES key length was chosen to be too short. I am trying to depict how DES would ...
sanjihan's user avatar
  • 205
3 votes
0 answers
72 views

Is uneven DES keybit use exploitable?

Question: Is there any cryptanalytic leverage to be had from the fact that some of the 56 "raw" keybits of DES are used more & less often than others? Observation: over the course of the 16 ...
outer's user avatar
  • 106
3 votes
0 answers
77 views

Delinearization in whitebox techniques

I'm reading through Chow et al.'s paper and Link et al.'s paper. There's a part I don't understand about Delinearization. They convert some steps of AES/DES into a Matrix, then divide the matrix in ...
David 天宇 Wong's user avatar
2 votes
1 answer
123 views

Proving DES complementation property: y = DES(k,x) ⟹ /y = DES(/k, /x)

Below is my proof for this. I was not sure if this is correct and was also a little confused regarding the complementarity property of DES. Does this property mean there is a serious vulnerability in ...
sangaCat's user avatar
2 votes
2 answers
122 views

Using the MAC to verify if Cipher Only attack has succeeded

I am working on an experiment to compare the efficiency of brute-force attacking block ciphers like AES and DES with reduced key sizes for different programming languages and library implementations. ...
Matt's user avatar
  • 21
2 votes
0 answers
39 views

How many ciphertexts should attacker intercepts if he only knows the first 3 bytes of plaintext of each one?

Consider a system in which DES is used to encrypt messages in which the first three plaintext Bytes are known by the attacker. How many encrypted messages is it necessary to intercept in order to be ...
Allexj's user avatar
  • 143
2 votes
0 answers
88 views

DES decryption of the homomorphic encryption ciphertext

I implemented an application using partial homomorphic encryption for outsourced computations. To get an efficient bandwidth, I am thinking to apply (DES) symmetric algorithm to encrypt the message ...
Maka's user avatar
  • 21
2 votes
0 answers
55 views

what if the S-boxes in DES were "optimal"

if we assume that the s-boxes in DES were optimal. that is for each s-box, every cell in the DDT equals to 4. is there a differential characteristic in a good probability?
john's user avatar
  • 21
2 votes
0 answers
76 views

Can someone help me understand how to get the I/O relation equations in DES S- boxes

I am referring to the equations that have been discussed in Nicolas T. Courtois and Gregory V. Bard's Algebraic Cryptanalysis of the Data Encryption Standard (in proceedings of Cryptography and Coding ...
Riddhi Ghosal's user avatar
2 votes
0 answers
602 views

Number of pairs needed to attack Double DES?

I'm having trouble understanding why,in order to do a brute force attack on a double DES (2 keys), one needs to have at least 2 pairs of known plain text? Same with 3DES (3 keys) one needs to have 3 ...
khaled's user avatar
  • 51
2 votes
0 answers
246 views

Does the encryption algorithm DES perform random permutations? If so how is information not lost?

Before round 1 begins, all 64 bits of an incoming message and all 56 bits of the secret key are separately permuted (shuffled) My question is this : Is the shuffling of the bits performed randomly? ...
k3khj21f's user avatar
2 votes
0 answers
129 views

prepaid meters that rely on a disconnected system

i have some experience with cryptography in the banking sectors, mostly in block ciphers like DES 3DES etc. im interested in prepaid electricity meters as it is a number that is generated from a ...
user2168435's user avatar
2 votes
1 answer
2k views

About the Algebraic Normal Form (ANF) of S-Box in DES

I've thought up a way to represent the transformation of S-Box in DES by ANF. Let $x_i\;(1\le i\le 6)$ be the input of an S-Box, $y_i\;(1\le i\le 4)$ be the output, for example, then $$y_1= 1\oplus ...
JeffLee's user avatar
  • 23
1 vote
0 answers
607 views

DES in cipher feedback mode CFB

We use DES in cipher feedback mode (CFB) to encrypt a plaintext $m = m_1\mathbin\|m_2\mathbin\|\ldots\mathbin\|m_{100}$ into a ciphertext $c_1\mathbin\|c_2\mathbin\|\ldots\mathbin\|c_{100}$, where ...
user108810's user avatar
1 vote
0 answers
69 views

DES next round key

I don't understand which DES key is used in the next round of Feistel construction. As you can see below, we use our original key that has been inserted in permuted choice 1, where we got 56 bits, ...
joxavy's user avatar
  • 11
1 vote
0 answers
316 views

Variant of DES and breaking the 16 round DES

Consider a variant of DES algorithm, called DES-WEAK. In DES-WEAK, there is no permutation P in a round and all the S-boxes are replaced. The new S-boxes are all identical and defined as follows. Let ...
Turing101's user avatar
  • 111
1 vote
0 answers
51 views

How does one produce this in the linear cryptanalysis of DES

I understand how this linear approximation board below is produced, but I can't understand how this second board is produced using the first one and finally how the pilling-up lemma values are ...
whatevahhh's user avatar
1 vote
0 answers
134 views

Formal security arguments for 3 round feistal network using PRF

There is a proof sketch in Introduction to modern cryptography that a three-round feistel network using pseudorandom round functions is a secure pseudorandom permutation PRP Πk against probabilistic ...
Chulbuli's user avatar
1 vote
0 answers
361 views

Vulnerability in DES3 when key can be chosen

In the question there are two functions encrypt basically does IV ⨁ DES3(P⨁IV) and encrypt_flag just encrypts the flag after being padded into a multiple of 8. IV is a random 8 byte number which is ...
Michael Blane's user avatar
1 vote
0 answers
457 views

OpenSSL DES encryption for KCV calculation

I'm trying to implement a simple command-line tool to calculate the (Key Check Value) KCV of some encryption keys. The algorithm for the KCV is simply to encrypt a block of 8 zeros with DES and get ...
daniel.franzini's user avatar
1 vote
0 answers
636 views

Prove how to brute-force the double encryption with complexity 2^57 rather than 2^112?

We know that DES has key length that is too short to defend brute-force attack. One idea to improve DES was to encrypt a message using DES twice with two different keys. Let E be the encryption ...
Haseeb Saeed's user avatar
1 vote
0 answers
61 views

How do additional input output pairs help with a Meet in the Middle attack on Double DES

Double DES is vulnerable to a Meet in the Middle attack where an attacker generates intermediate values and then matches them up to find candidate key pairs. For Double DES using $56$ bit keys and $1$ ...
NotSoTuringComplete's user avatar
1 vote
0 answers
125 views

DES P box design criteria

I hope somebody can help me to find out how DES P box has designed. I am doing DES by hand so I want to know how these numbers are arranged?
Sadiqa Ilyas's user avatar
1 vote
0 answers
76 views

In DES : Matsui's notation(LC) vs Biham's notation(DC)

I'm doing linear attack for 8 rounds DES. And I just wondering about the difference between Matsui's notation and Biham's notation. In Matsui's paper, numbers bits from 0 to 63 from right to left. In ...
pioneer's user avatar
  • 325
1 vote
0 answers
85 views

differential cryptanalysis on the second round of 4-variant DES

I am using differential cryptanalysis to attack the second key of a 4-variant DES and I am using Shamir and biham book as a reference . they say that we should choose two input Xor P3 and P4 that ...
siba36's user avatar
  • 301
1 vote
0 answers
90 views

How is pipelined DES different from sequential DES?

I implemented DES Coder in VHDL using ISE IDE by Xilinx in sequential architecture which was pretty easy and straightforward. Now my task is to do the same using pipelined architecture so that the ...
Filip Mazi's user avatar
1 vote
0 answers
273 views

Triple DES: Does knowing the plaintext limit my keyspace for brute force?

My goal is to try and decrypt a single 8 byte block of a Triple DES encrypted data block and in doing so discovering the 8 byte keys that were used. This is mostly an academic exercise but could ...
maple_shaft's user avatar
1 vote
0 answers
72 views

What are the positive consequences for choosing 8 S-boxes for DES vs 1 S-box for AES?

What are the positive consequences for choosing 8 S-boxes for DES vs 1 S-box for AES? I could guess side channel resistance, but I can't find anything on it.
user3201068's user avatar
1 vote
0 answers
446 views

Is 3 rounds more secure than 2 in this simplified DES?

Consider the following simplification of DES: a plaintext message block of $2n$ bits of length is divided into two blocks of length $n$ (left half $L_0$ and right half $L_1$). In other words, the ...
lockerz's user avatar
  • 43
1 vote
0 answers
735 views

CBC MAC and DES combined question?

Suppose that we want to develop a MAC scheme which is as secure as Triple-DES CBC-MAC and at the same time as efficient as Single-DES CBC-MAC. We come up with the following idea: Except the last ...
supersonic's user avatar
1 vote
0 answers
706 views

Method and explanation for calculating difference in speed between DES and RSA

Our assignment asks us to convert an RSA speed in bytes per second to a DES speed in bytes per second. Our professor's treatment of this ("RSA is 100 times slower than DES") seems insufficient. Could ...
gal's user avatar
  • 111
0 votes
0 answers
118 views

Finding bit positions of '1' in DES Encryption

In DES encryption, the IP table is shown. If the input given in hexadecimal is "0020 0940 0000 F008", which are the bit positions of "1" after the IP stage ?
Bassel 1000's user avatar
0 votes
0 answers
330 views

MDK vs IMK vs MK key differences

I don't understand whether they are different or not. Would you mind explaining them all? MK-AC, MK-SMI, MK-SMC MDK Encryption Key, MDK MAC, MDK AC IMK-AC, IMK-SMI, IMK-SMC For example, in the ...
Soner from The Ottoman Empire's user avatar
0 votes
0 answers
631 views

Cracking 2-Key Triple DES

I've been given that an attacker has a 2-Key Triple DES Cracker that is capable of performing 10$^{24}$ encryptions per second and have subsequently been asked how long it must take before the ...
murpw2011's user avatar
  • 101
0 votes
0 answers
44 views

Is the following attack on a DES-based commitment scheme valid?

I've encountered the following question while practising for an upcoming exam in Cryptography and would like to know if I'm on the right track: The following is a suggestion for a DES-based ...
Anon's user avatar
  • 403
0 votes
0 answers
36 views

Evaluation of prediction of probability is a DES structure

Suppose you are given $DES_k(m)$ for some unknown $k$ and $m$, where DES() is the usual DES scheme. With what probability can you predict, for example, the 12-th bit in the output of $DES_{\bar{k}}(\...
Sudhir Kumar Sahoo's user avatar
0 votes
0 answers
122 views

How Differential Cryptanalysis of DES work?

I have been studying the DC of DES. As a beginner, I completed the general structure of DES and began DC. I understand the idea of attack, how to find different characteristics for differential ...
Ekin's user avatar
  • 1
0 votes
0 answers
270 views

How to find Difference distribution table of DES S box?

I Have used Sage command ...
lilly lord's user avatar
0 votes
0 answers
303 views

Known Plain Text Attack DES-OFB on Crack.sh

I am trying to do a known plaintext attack on DES-OFB through crack.sh. I have been having trouble lately. I keep getting blank text file back with no keys returned. Does anybody know if DES-OFB is ...
user avatar
0 votes
0 answers
837 views

"16-bit DES encryption algorithm"

I need to use encryption software from PSpice for my SPICE model. In a user guide on page 71 they claim to use a "16-bit DES encryption algorithm". According to the wiki DES is using a 64-...
herald4's user avatar
0 votes
0 answers
431 views

How to determine the maximum number of times the DES algorithm needs to be run?

I am only a beginner in cryptography and I am getting confused by the following: Question Consider a known-plaintext attack performed on a double-DES cryptosystem. (a) Determine the maximum number ...
John's user avatar
  • 43
0 votes
0 answers
275 views

DES Meet in the Middle

My professor showed us the basics of DES, and then displayed this slide where the Meet in the Middle attack can be used as a way of cracking DES. I believe at this stage we are doing 2DES, as opposed ...
securityauditor's user avatar
0 votes
0 answers
75 views

Lineary of Sbox in DES

I'm not a mathematician, and i would like to understand in the most concise way (if possible) why choosing linear S-Box functions makes the DES algorithm attackable. Thanks
AleWolf's user avatar
  • 461
0 votes
0 answers
105 views

Meet-in-the-middle attack (different block cipher modes)

Does a meet-in-the-middle attack on depend on the used modes for block ciphers? encryption: $C_i$ = $D_{K2}$($D_{K1}$($E_{K1}$($P_i$ $\oplus$ $C''_{i-1}$))) $\oplus$ $C'_{i-1}$ and $IV_1$ = $C''_0$ = ...
Dario Blair's user avatar
0 votes
0 answers
86 views

Is it possible for an attacker to determine the original input to the S-Boxes in DES?

I am learning about DES, a Feistel 64-bit block cipher with 16 rounds. Is it possible that an intruder can determine the original input to the S-Boxes?
Mike S's user avatar
  • 1