Crypto list members: The very honest to g-d truth is not that DES is weak due to a short key length, or even broken (which is a lie, it has never been cracked). Its key length would not be considered short if we were all running 1MHz Z80s again. Key length is a determining factor only when the technology of effectuating a brute force attack in a short period of time has become a low cost choice. Everyone now is saying 3DES is strong, but will we consider it strong in 3 years? Even if the algorithm is never found to have been cracked? Of course we will, by then we will all have 12GHz processors, and 3DES will seem the same joke that DES is now. Very Respectfully, Stuart Blake Tener, IT3, USNR-R, N3GWG Beverly Hills, California VTU 1904G (Volunteer Training Unit) stuart@xxxxxxxxxxx west coast: (310)-358-0202 P.O. Box 16043, Beverly Hills, CA 90209-2043 east coast: (215)-338-6005 P.O. Box 45859, Philadelphia, PA 19149-5859 Telecopier: (419)-715-6073 fax to email gateway via www.efax.com (it's free!) JOIN THE US NAVY RESERVE, SERVE YOUR COUNTRY, AND BENEFIT FROM IT ALL. Friday, October 05, 2001 4:52 PM -----Original Message----- From: owner-linux-crypto@xxxxxxxxxxxx [mailto:owner-linux-crypto@xxxxxxxxxxxx]On Behalf Of Dan Hollis Sent: Friday, October 05, 2001 2:15 PM To: Sandy Harris Cc: linux-crypto@xxxxxxxxxxxx Subject: Re: des-cbc On Fri, 5 Oct 2001, Sandy Harris wrote: > Single DES has been literally broken several times. No it hasnt. "broken" implies an exploit other than brute force is possible. Single DES is only weak because of its keylength. Brute force attacks work against ANY algorithm of short keylength. DES certainly isn't any weaker than any other cypher of the same keylength. -Dan -- [-] Omae no subete no kichi wa ore no mono da. [-] Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/