Hosting Provided By

Re: Some questions on DES Encryption...

From: <Valdis.Kletnieks(at)vt.edu>
Date: Mon Mar 10 2003 - 13:31:25 EST

On Mon, 10 Mar 2003 09:24:42 PST, Jeremy Epstein <jeremy.epstein@webmethods.com> said:
> Depends on why you're asking. If you're researching crypto,

Or as Marcus Ranum called it: "Rubber Hose Cryptography" ;)

Yes, the crypto *system* probably has some other weakness (hint: almost nobody does key management correctly - look for post-it notes on monitors).

On the other hand, 56bit single-DES is sufficiently weak that it's quite feasible to build a brute-force cracker. The EFF did so several years ago.

New code development should be using 3DES or AES or something of equivalent strength. Then go back and look at your key management again....

-- 
				Valdis Kletnieks
				Computer Systems Senior Engineer
				Virginia Tech

Received on Mon Mar 10 14:38:29 2003

This archive was generated by hypermail 2.1.8 : Wed Aug 23 2006 - 14:02:46 EDT