According to http://www.nytimes.com/library/tech/98/07/biztech/articles/17encrypt.html John Gilmore and Paul Kocher have designed and built a DES-cracking machine. It works; the whole project cost just $250,000. When is the right time to discuss making a stronger cipher than DES mandatory?