Security Implications of Using the Data Encryption Standard (DES)
Metadata
- Publisher
- IETF
- Doc Type
- Informational
- Pages
- 28
- Abstract
- The Data Encryption Standard (DES) is susceptible to brute-force attacks, which are well within the reach of a modestly financed adversary. As a result, DES has been deprecated, and replaced by the Advanced Encryption Standard (AES). Nonetheless, many applications continue to rely on DES for security, and designers and implementers continue to support it in new applications. While this is not always inappropriate, it frequently is. This note discusses DES security implications in detail, so that designers and implementers have all the information they need to make judicious decisions regarding its use. This memo provides information for the Internet community.
- Publication Date
- 2006-12-01
- Status Note
- Informational
- DOI
10.17487/RFC4772- Link
- https://doi.org/10.17487/RFC4772
- Author(s)
- Scott G. Kelly
Latest version of IETF RFC 4772
Document Versions — IETF RFC 4772
-
▶ IETF RFC 4772 (2006-12-01)THIS DOC [ACTIVE] [LATEST VERSION]
Bibliographic Reference(s)
- ISBN.9780471117094 — 7. Menezes A. van Oorshot P. Vanstone S. , Handbook of Applied Cryptography , CRC Press , 1997 . EXTERNAL
- NIST FIPS 197 [Superseded]
- Press Release, RSA., "Distributed Team Collaborates to Solve Secret-Key Challenge", 1998, < http:// www.rsasecurity.com/press_release.asp?doc_id=558&id=1034 >. EXTERNAL
- Wiener, M., "Efficient DES Key Search", August 1993. EXTERNAL
- Koeune, F., Rouvroy, G., Standaert, F., Quisquater, J., David, J., and J. Legat, "An FPGA Implementation of the Linear Cryptanalysis", FPL 2002, Volume 2438 of Lecture Notes in Computer Science, pages 846-852, Spriger-Verlag, September 2002. EXTERNAL
- Curtin, M., "Brute Force: Cracking the Data Encryption Standard", 2005. EXTERNAL
- Press Release, RSA., "RSA Code-Breaking Contest Again Won by Distributed.Net and Electronic Frontier Foundation", 1999, < http://www.rsasecurity.com/ press_release.asp?doc_id=462&id=1034 >. EXTERNAL
- "CNSS Policy No. 15, Fact Sheet No. 1", June 2003, < http://csrc.nist.gov/cryptval/CNSS15FS.pdf >. EXTERNAL
- Hellman, M. and W. Diffie, "Exhaustive Cryptanalysis of the NBS Data Encryption Standard", June 1977. EXTERNAL
- "NIPC Advisory 01-003", March 2001, < http://www.fbi.gov/pressrel/pressrel01/nipc030801.htm >. EXTERNAL
- Biham, E., "How to Forge DES-Encrypted Messages in 2^28 Steps", 1996. EXTERNAL
- Kelsey, J., Schneier, B., and D. Wagner, "Key-Schedule Cryptanalysis of 3-WAY, IDEA, G-DES, RC4, SAFER, and Triple-DES", 1996. EXTERNAL
- EFF, "Cracking DES", July 1998. EXTERNAL
- Blaze, M., Diffie, W., Rivest, R., Schneier, B., Shimomura, T., Thompson, E., and M. Wiener, "Minimal Key Lengths for Symmetric Ciphers to Provide Adequate Commercial Security", January 1996. EXTERNAL
- "DES Transition Plan", May 2005, < http://csrc.nist.gov/cryptval/DESTranPlan.pdf >. EXTERNAL
- Press Release, RSA., "RSA to Launch "DES Challenge II" at Data Security Conference", 1998, < http:// www.rsasecurity.com/press_release.asp?doc_id=729&id=1034 >. EXTERNAL
- "FBI Webpage: Focus on Economic Espionage", January 2006, < http://www.fbi.gov/hq/ci/economic.htm >. EXTERNAL
- Ferguson, N. and B. Schneier, "Practical Cryptography", 2003. EXTERNAL
- "Extreme availability: New York Stock Exchange's new IT infrastructure puts hand-held wireless terminals in brokers' hands.", June 2005. EXTERNAL
- Ianelli, N. and A. Hackworth, "Botnets as a Vehicle for Online Crime", December 2005, < http://www.cert.org/archive/pdb/Botnets.pdf >. EXTERNAL
- "Data Encryption Standard", January 1977, < http://www.nist.gov >. EXTERNAL
- Matsui, M., "Linear Cryptanalysis Method for DES Cipher", 1993. EXTERNAL
- Curtin, M. and J. Dolske, "A Brute Force Search of DES Keyspace", 1998, < http://www.interhack.net/pubs/des-key-crack/ >. EXTERNAL
- Press Release, RSA., "Team of Universities, Companies and Individual Computer Users Linked Over the Internet Crack RSA's 56-Bit DES Challenge", 1997, < http:// www.rsasecurity.com/press_release.asp?doc_id=661&id=1034 >. EXTERNAL
- Jakobsen, T. and L. Knudsen, "The Interpolation Attack on Block Ciphers", 1997. EXTERNAL
- "Review of Issues Related to the Loss of VA Information Involving the Identities of Millions of Veterans (Report #06-02238-163)", July 2006, < http://www.va.gov/oig/51/ FY2006rpts/VAOIG-06-02238-163.pdf >. EXTERNAL
- Press Release, distributed., "US GOVERNMENT'S ENCRYPTION STANDARD BROKEN IN LESS THAN A DAY", 1999, < http://www1.distributed.net/des/release-desiii.txt >. EXTERNAL
- Press Release, RSA., "RSA to Launch DES Challenge III Contest at 1999 Data Security Conference", 1998, < http:// www.rsasecurity.com/press_release.asp?doc_id=627&id=1034 >. EXTERNAL
- Biham, E. and A. Shamir, "A New Cryptanalytic Attack on DES", 1996. EXTERNAL
- Lucks, S., "Attacking Triple Encryption", 1998. EXTERNAL
- Biham, E. and A. Shamir, "Differential Cryptanalysis of the Data Encryption Standard", 1993. EXTERNAL
- "Know Your Enemy: Tracking Botnets", March 2005, < http://www.honeynet.org/papers/bots/ >. EXTERNAL
Source Data (JSON)
Full registry record with provenance metadata. Open directly: /api/doc/RFC4772.json
Reference Tree
Explore all references and references to this document, as a navigable tree.
Open Reference TreeReference this Doc
Plain text (ISO 690 compliant)
Preview:
IETF RFC 4772, Security Implications of Using the Data Encryption Standard (DES). Available at https://doi.org/10.17487/RFC4772
Snippet:
IETF RFC 4772, Security Implications of Using the Data Encryption Standard (DES). Available at https://doi.org/10.17487/RFC4772
HTML (ISO 690 compliant)
Preview:
IETF RFC 4772, Security Implications of Using the Data Encryption Standard (DES). Available at https://doi.org/10.17487/RFC4772
Snippet:
<span class="citation"><cite>IETF RFC 4772</cite>, Security Implications of Using the Data Encryption Standard (DES). Available at <a href="https://doi.org/10.17487/RFC4772" target="_blank" rel="noopener">https://doi.org/10.17487/RFC4772</a></span>
SMPTE's HTML Pub
Preview:
IETF RFC 4772, Security Implications of Using the Data Encryption Standard (DES)
doi: 10.17487/RFC4772
url: https://doi.org/10.17487/RFC4772
doi: 10.17487/RFC4772
url: https://doi.org/10.17487/RFC4772
Snippet:
<li> <cite id="bib-rfc4772">IETF RFC 4772</cite>, Security Implications of Using the Data Encryption Standard (DES) <span class="doi">10.17487/RFC4772</span> </li>
Referenced By
- IETF RFC 6649 [Active*]