Data Encryption Standard (DES)
Data Encryption Standard (DES)
Published 1977 NBS Original IBM design 64 bit input 64 bit encrypted output 56 bit key with odd parity (total 64 bits) Suitable for hardware not software 56 bits no longer secure
56 bit key
56 bit key
Round 1
48 bit key k1
Round 1
Round 2 Round 16
Round 2 Round 16
ki k k
24 bits
24 bits
NB Initial permutation to produce c0 and d0 is not random and has no security value
L n 32 bits
Rn 32 bits Mangler + kn
L n 32 bits
Rn 32 bits Mangler + kn
R n+132 bits
R n+132 bits
Mangler Overview
R = 32 bits = 8 x 4 bits 8 x 6 bits by copying last 2 bits in every 4 Take 48 bit key k and add mod 2 to expanded 48 bit R Result is 48 bits = 8 x 6 bits Compress each 6 bits to 4 bits through S box giving 32 bits
Established 1991 64-bit plaintext 64-bit ciphertext 128-bit key Round structure and Mangler similar to DES
IDEA Overview
64-bit input 128-bit key
key expansion
Xa X b X c Xd
Round 1
K1 K2 K 3 K 4
Round 2
K5 K6 K49K50K 51 K 52
Round 17
64-bit output
Xa
Xb
Xc
Xd
Yin
Z in
Ke
+
kf
Ka
Kb
Kc
Kd
Mangler Function
Yout Zout
+ Xa Xb Xc Xd
Xa
+
Xb
+
Xc
+
Xd
IDEA Decryption
All processes the same Even round is its own inverse (use same keys) Odd rounds use inverse keys