home *** CD-ROM | disk | FTP | other *** search
- Path: sparky!uunet!usc!rpi!batcomputer!cornell!uw-beaver!cs.ubc.ca!unixg.ubc.ca!unruh
- From: unruh@physics.ubc.ca (William Unruh)
- Newsgroups: sci.crypt
- Subject: Re: Triple DES
- Date: 20 Nov 1992 04:50:53 GMT
- Organization: The University of British Columbia
- Lines: 13
- Distribution: world
- Message-ID: <1ehqrdINN1f9@iskut.ucs.ubc.ca>
- References: <921116133628.385022@DOCKMASTER.NCSC.MIL> <1eg516INNrrq@uniwa.uwa.edu.au> <1992Nov19.150019.19072@news.nd.edu> <1992Nov19.150611.1@zodiac.rutgers.edu>
- NNTP-Posting-Host: physics.ubc.ca
-
- leichter@zodiac.rutgers.edu writes:
- >.... (Actually, "meet in the middle"
- >attacks show that double encryption, done this way, cannot be MUCH stronger
- >than single encryption - though it may be SOMEWHAT stronger.)
-
- > -- Jerry
- Since the total number of possible encrypting functions of 64 bits is
- something like (2^64)!, and there are only 2^56 DES encryption
- functions and multiple DES is half the set of all encryptions, I would
- expect (naively) that double encryption would essentially be as strong
- as a key with 2*56=112 bits, unless DES is almost a group ( ie most
- double encryptions yield the same encryption as some single DES). Why is
- this argument wrong, or is DES almost a group in the above sense?
-