[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: 3DES keys
I suppose people like 3DES becasue the financial community is headed
that way and there is hardware for it. But if I wanted something
stronger than DES but keeping the measly 64 bit block size, I think
I'd go for D-I-D. You take 128 bits of key, DES with the top 64
(ignoring parity), IDEA the output with them all, then DES with
the bottom 64 (ignoring parity). Then you can CBC around the whole
thing.
Donald
From: Hilarie Orman <ho@cs.arizona.edu>
To: bsimpson@morningstar.com
Cc: ipsec@ans.net
In-Reply-To: Yourmessage <199510020505.AA26294@interlock.ans.net>
}RSA Labs, http://www.rsa.com/rsalabs/cryptobytes/spring95/news.htm:
}
} Modes involving single-DES instead of triple-DES as a primitive, such
} as encrypting three times with single-DES in cipher block chaining
} mode, have been shown by Eli Biham in the past year to be potentially
} no stronger than single-DES against certain attacks. Encrypting with
} triple-DES in cipher block chaining mode is not vulnerable to those
} attacks.
}
}...
}
References: