Questions tagged [des]

(or Data Encryption Standard), a (symmetric) block cipher using a 64 bit block size, with keys of size 56 bit, the standard US block cipher from 1976 to 2001.

42 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
6
votes
2answers
481 views

DES and AES cryptography

I have a question that I can't answer: A plain text has been encrypted 3 times in a DES method with 3 different keys 56 bit each, after it the text was encrypted for the forth time using a AES ...
5
votes
0answers
178 views

aside from DES has the NSA ever strengthened algorithms?

When DES was originally developed, the NSA changed the s-boxes. For decades people thought that their changes introduced a backdoor but then it was discovered that their changes actually strengthened ...
4
votes
0answers
164 views

How many reversible gates would DES require?

How many reversible gates (said counting Toffoli and Controlled NOT, with free NOT) would be required to reversibly implement $(K,P)\mapsto(G,C)$ for the block cipher DES? $P$ is the plaintext, $C$ ...
3
votes
0answers
108 views

Is there any real attack deployed on the CTR mode over history?

The CTR mode, with its CPA security, is one of the malleable block cipher mode of operations. An attacker can simply modify the bits of the ciphertext stream in their advance. This is due to the lack ...
3
votes
0answers
51 views

Bitslice DES decryption

I would like to implement fast DES decryption using Bitslice technique. Without bitslice DES technique, I have already done decrpytion in this source code by changing the for loop from 15 to 0. In ...
3
votes
0answers
84 views

Effect of longer key on DES security

I am reading a book on cryptography and the author states that one of the complaints of the research community was that DES key length was chosen to be too short. I am trying to depict how DES would ...
3
votes
0answers
49 views

Is uneven DES keybit use exploitable?

Question: Is there any cryptanalytic leverage to be had from the fact that some of the 56 "raw" keybits of DES are used more & less often than others? Observation: over the course of the 16 ...
2
votes
0answers
54 views

DES decryption of the homomorphic encryption ciphertext

I implemented an application using partial homomorphic encryption for outsourced computations. To get an efficient bandwidth, I am thinking to apply (DES) symmetric algorithm to encrypt the message ...
2
votes
0answers
41 views

what if the S-boxes in DES were “optimal”

if we assume that the s-boxes in DES were optimal. that is for each s-box, every cell in the DDT equals to 4. is there a differential characteristic in a good probability?
2
votes
0answers
68 views

differential cryptanalysis on the second round of 4-variant DES

I am using differential cryptanalysis to attack the second key of a 4-variant DES and I am using Shamir and biham book as a reference . they say that we should choose two input Xor P3 and P4 that ...
2
votes
0answers
68 views

Can someone help me understand how to get the I/O relation equations in DES S- boxes

I am referring to the equations that have been discussed in Nicolas T. Courtois and Gregory V. Bard's Algebraic Cryptanalysis of the Data Encryption Standard (in proceedings of Cryptography and Coding ...
2
votes
0answers
474 views

Number of pairs needed to attack Double DES?

I'm having trouble understanding why,in order to do a brute force attack on a double DES (2 keys), one needs to have at least 2 pairs of known plain text? Same with 3DES (3 keys) one needs to have 3 ...
2
votes
0answers
154 views

Does the encryption algorithm DES perform random permutations? If so how is information not lost?

Before round 1 begins, all 64 bits of an incoming message and all 56 bits of the secret key are separately permuted (shuffled) My question is this : Is the shuffling of the bits performed randomly? ...
2
votes
0answers
102 views

prepaid meters that rely on a disconnected system

i have some experience with cryptography in the banking sectors, mostly in block ciphers like DES 3DES etc. im interested in prepaid electricity meters as it is a number that is generated from a ...
2
votes
1answer
831 views

About the Algebraic Normal Form (ANF) of S-Box in DES

I've thought up a way to represent the transformation of S-Box in DES by ANF. Let $x_i\;(1\le i\le 6)$ be the input of an S-Box, $y_i\;(1\le i\le 4)$ be the output, for example, then $$y_1= 1\oplus ...
2
votes
0answers
61 views

Delinearization in whitebox techniques

I'm reading through Chow et al.'s paper and Link et al.'s paper. There's a part I don't understand about Delinearization. They convert some steps of AES/DES into a Matrix, then divide the matrix in ...
1
vote
1answer
185 views

Frequency Analysis on DES, AES, 3DES using Cryptool2

I am trying to analyze symmetric block ciphers like DES, 3DES and AES, using Cryptool 2. I want to do a frequency analysis on each of these ciphers, in order to comment whether this is an effective ...
1
vote
0answers
71 views

Prove how to brute-force the double encryption with complexity 2^57 rather than 2^112?

We know that DES has key length that is too short to defend brute-force attack. One idea to improve DES was to encrypt a message using DES twice with two different keys. Let E be the encryption ...
1
vote
0answers
31 views

How do additional input output pairs help with a Meet in the Middle attack on Double DES

Double DES is vulnerable to a Meet in the Middle attack where an attacker generates intermediate values and then matches them up to find candidate key pairs. For Double DES using $56$ bit keys and $1$ ...
1
vote
0answers
46 views

DES P box design criteria

I hope somebody can help me to find out how DES P box has designed. I am doing DES by hand so I want to know how these numbers are arranged?
1
vote
0answers
76 views

How is pipelined DES different from sequential DES?

I implemented DES Coder in VHDL using ISE IDE by Xilinx in sequential architecture which was pretty easy and straightforward. Now my task is to do the same using pipelined architecture so that the ...
1
vote
0answers
198 views

Triple DES: Does knowing the plaintext limit my keyspace for brute force?

My goal is to try and decrypt a single 8 byte block of a Triple DES encrypted data block and in doing so discovering the 8 byte keys that were used. This is mostly an academic exercise but could ...
1
vote
0answers
65 views

What are the positive consequences for choosing 8 S-boxes for DES vs 1 S-box for AES?

What are the positive consequences for choosing 8 S-boxes for DES vs 1 S-box for AES? I could guess side channel resistance, but I can't find anything on it.
1
vote
0answers
255 views

Is 3 rounds more secure than 2 in this simplified DES?

Consider the following simplification of DES: a plaintext message block of $2n$ bits of length is divided into two blocks of length $n$ (left half $L_0$ and right half $L_1$). In other words, the ...
1
vote
0answers
654 views

CBC MAC and DES combined question?

Suppose that we want to develop a MAC scheme which is as secure as Triple-DES CBC-MAC and at the same time as efficient as Single-DES CBC-MAC. We come up with the following idea: Except the last ...
1
vote
0answers
644 views

Method and explanation for calculating difference in speed between DES and RSA

Our assignment asks us to convert an RSA speed in bytes per second to a DES speed in bytes per second. Our professor's treatment of this ("RSA is 100 times slower than DES") seems insufficient. Could ...
0
votes
0answers
27 views

Avalanche effect SBOX

It is possible to achieve the avalanche effect in an SPN or in a Feistel network that use a single round of an SPN in his function (like DES) using SBOX that receive 2 bit in input and output 2 bit?
0
votes
0answers
39 views

Matsui's Linear Attack algorithms

I'm trying to understand Matsui's linear attack on DES and I don't understand something in the paper. I can't understand how the algorithms 1 & 2 work.
0
votes
0answers
58 views

Triple encryption with three separate keys, cascading vs. interweaving

When performing triple encryption using three separate keys, how have cascading vs. interweaving stacked up against each other in cryptoanalysis? Most of the references to triple encryption I see seem ...
0
votes
0answers
64 views

“16-bit DES encryption algorithm”

I need to use encryption software from PSpice for my SPICE model. In a user guide on page 71 they claim to use a "16-bit DES encryption algorithm". According to the wiki DES is using a 64-...
0
votes
0answers
31 views

How to determine the maximum number of times the DES algorithm needs to be run?

I am only a beginner in cryptography and I am getting confused by the following: Question Consider a known-plaintext attack performed on a double-DES cryptosystem. (a) Determine the maximum number ...
0
votes
0answers
55 views

DES Meet in the Middle

My professor showed us the basics of DES, and then displayed this slide where the Meet in the Middle attack can be used as a way of cracking DES. I believe at this stage we are doing 2DES, as opposed ...
0
votes
1answer
266 views

Time taken for Brute Force Attack on DES

An attacker is equipped with a computer that performs 10 trillion (1013) DES decryptions per second, what is the average time required, in hours, for a brute force attacker to break DES? Key size is ...
0
votes
1answer
133 views

How to figure out DES mode used given plaintext and ciphertext?

In DES, I'm given the following exercise. - How can I find out which part of the plaintext each ciphertext message corresponds to, and which mode they were each encrypted with?
0
votes
0answers
60 views

In DES what happens if the 32-bit swap at the end is not performed while decrypting?

I know that the swap at the end of DES is so that the same algorithm can be used for encryption and decryption, but I'm wondering what happens if one does not include the swap at the end. What is the ...
0
votes
0answers
40 views

Differential cryptanalysis for DES reduced to Four Rounds and about S/N

I'm reading the paper "Differential Cryptanalysis of the Data Encryption Standard(2009)" and I was stuck in a certain part while reading it. In chapter 4, they explained about differential ...
0
votes
0answers
36 views

Lineary of Sbox in DES

I'm not a mathematician, and i would like to understand in the most concise way (if possible) why choosing linear S-Box functions makes the DES algorithm attackable. Thanks
0
votes
0answers
51 views

In DES : Matsui's notation(LC) vs Biham's notation(DC)

I'm doing linear attack for 8 rounds DES. And I just wondering about the difference between matsui's notation and Biham's notation. In Matsui's paper, numbers bits from 0 to 63 from right to left. In ...
0
votes
0answers
58 views

Meet-in-the-middle attack (different block cipher modes)

Does a meet-in-the-middle attack on depend on the used modes for block ciphers? encryption: $C_i$ = $D_{K2}$($D_{K1}$($E_{K1}$($P_i$ $\oplus$ $C''_{i-1}$))) $\oplus$ $C'_{i-1}$ and $IV_1$ = $C''_0$ = ...
0
votes
0answers
83 views

Is it possible for an attacker to determine the original input to the S-Boxes in DES?

I am learning about DES, a Feistel 64-bit block cipher with 16 rounds. Is it possible that an intruder can determine the original input to the S-Boxes?
0
votes
0answers
179 views

If a DES key correctly decrypts one message, what's the probability it's the real key?

Suppose an adversary gets a message-ciphertext pair $(M,C)$, where $C=DES_K(M)$. They do an exhaustive key reach to locate the lexicographically first key $T$ for which $C=DES_T(M)$. What's the ...
-1
votes
1answer
651 views

Problem with implementing DES in python

i'm implementing DES in python and i've stumbled upon a problem i can't really find the problem, after debugging it i narrowed it down to this function, can anyone tell me if i'm implementing the DES ...