DES

Designers:

Don Coppersmith, Horst Feistel, Walt Tuchmann

Published:

1976

References:

• [Def] U.S. National Institute of Standards and Technology,
• NIST FIPS PUB 46-2 (supercedes FIPS PUB 46-1), "Data Encryption Standard", U.S. Department of Commerce, December 1993.
• [Test, Inf] U.S. National Institute of Standards and Technology
• NIST FIPS PUB 74, "Guidelines for Implementing and Using the NBS Data Encryption Standard".
• [Inf] Bruce Schneier,
• "Chapter 12 Data Encryption Standard,"
• Applied Cryptography, Second Edition
• [Inf] A. Menezes, P.C. van Oorschot, S.A. Vanstone,
• "Section 7.4 DES,"
• Handbook of Applied Cryptography, CRC Press, 1997.
• chap7.pdf>, .ps <http://www.cacr.math.uwaterloo.ca/hac/about/chap7.ps>
• [An] E. Biham, A. Shamir,
• "Differential Cryptanalysis of the Full 16-Round DES,"
• CS 708, Proceedings of Crypto '92, Volume 740 of Lecture Notes in Computer Science, December 1991.
• CS0708.ps>
• [] E. Biham, A. Shamir,

Differential Cryptanalysis of the Data Encryption Standard,

• Springer-Verlag, 1993.
• [An] M. Matsui,
• "Linear cryptanalysis method for DES cipher,"
• Advances in Cryptology - EUROCRYPT '93 Proceedings, Volume 765 of Lecture Notes in Computer Science (T. Helleseth, ed.), pp. 386-397. Springer-Verlag, 1994.
• [An] E. Biham, A. Biryukov,
• "An Improvement of Davies' Attack on DES,"
• CS 817, EUROCRYPT '94 Proceedings (May 1994), Volume 950 of Lecture Notes in Computer Science (A. De Santis, ed.), Springer Verlag, 1995, and
• Journal of Cryptology, Vol. 10, No. 3, pp. 195-206, 1997.
• CS0817.ps>
• [An] Lars Knudsen,
• "New potentially weak keys for DES and LOKI,"

Advances in Cryptology - EUROCRYPT '94 Proceedings, Volume 950 of Lecture Notes in Computer Science (A. De Santis, ed.), pp. 419-424. Springer Verlag, 1995.

• Key length: 64 bits as encoded; 56 bits excluding parity bits.
• Block size:

Comment:

Implementations MUST ignore (i.e. not check) the parity bits of keys. KeyGenerators for DES MUST, however, output keys with correct parity.

Security comment:

The fixed 56-bit effective key length is too short to prevent brute-force attacks